Skip to content

Add config option to allow running insecure content#9

Merged
mrautio merged 1 commit intomainfrom
feature/allow-insecure-sockets
Mar 1, 2026
Merged

Add config option to allow running insecure content#9
mrautio merged 1 commit intomainfrom
feature/allow-insecure-sockets

Conversation

@mrautio
Copy link
Collaborator

@mrautio mrautio commented Mar 1, 2026

Add configuration option <allowrunninginsecurecontent/> to allow running insecure content.

URL: https://learn.microsoft.com/en-us/microsoft-edge/webview2/concepts/webview-features-flags?tabs=dotnetcsharp
allow-running-insecure-content: Enables insecure content in Cast Web Runtime. This flag unblocks MSPs that serve content from HTTP sources.

This is for use cases where local WebDemoExe tries to access unsecured connections, for example, light server protocol at Instanssi demoparty

Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Adds a new XML config option to enable WebView2’s --allow-running-insecure-content switch, intended to unblock demos that need to access insecure (e.g., HTTP / ws://) resources from the embedded WebView.

Changes:

  • Add <allowrunninginsecurecontent/> config parsing and apply the corresponding WebView2 browser argument.
  • Introduce an AddBrowserArgument helper to append multiple WebView2 command-line switches without overwriting previous ones.
  • Document the new config option in readme.md.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 3 comments.

File Description
readme.md Documents the new <allowrunninginsecurecontent/> config option and links it to the WebView2 flag.
MainWindow.xaml.cs Parses the new XML tag and appends --allow-running-insecure-content to WebView2 additional browser arguments.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

URL: https://learn.microsoft.com/en-us/microsoft-edge/webview2/concepts/webview-features-flags?tabs=dotnetcsharp

allow-running-insecure-content: Enables insecure content in Cast Web Runtime. This flag unblocks MSPs that serve content from HTTP sources.
This is for use cases where local WebDemoExe tries to access unsecured (local) connections, for example, light server protocol at Instanssi demoparty
@mrautio mrautio force-pushed the feature/allow-insecure-sockets branch from 8e9ca79 to 5c3fc7f Compare March 1, 2026 09:05
@mrautio mrautio requested a review from Copilot March 1, 2026 09:08
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.


💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@mrautio mrautio marked this pull request as ready for review March 1, 2026 16:47
@mrautio mrautio merged commit be14751 into main Mar 1, 2026
6 checks passed
@mrautio mrautio deleted the feature/allow-insecure-sockets branch March 1, 2026 16:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants