🐛fix: allow script posthog

[urmauur]

Describe Your Changes

This pull request updates the src-tauri/tauri.conf.json file to expand the list of allowed script sources. The change adds new domains to improve compatibility with external services.

Security configuration update:

• src-tauri/tauri.conf.json: Added https://eu-assets.i.posthog.com and https://posthog.com to the script-src directive in the Content Security Policy, allowing scripts from these domains to be loaded.

Fixes Issues

• Closes #
• Closes #

Self Checklist

• Added relevant comments, esp in complex areas
• Updated docs (for bug fixes / features)
• Created issues for follow-up changes or refactoring needed

---

Important

Update script-src in src-tauri/tauri.conf.json to allow scripts from PostHog domains.

• Security Configuration:
  • Updated script-src in src-tauri/tauri.conf.json to include https://eu-assets.i.posthog.com and https://posthog.com for script loading.

^{This description was created by for b71211e. You can customize this summary. It will automatically update as commits are pushed.}

[ellipsis-dev]

Important

Looks good to me! 👍

Reviewed everything up to b71211e in 59 seconds. Click for details.

• Reviewed 13 lines of code in 1 files
• Skipped 0 files when reviewing.
• Skipped posting 2 draft comments. View those below.
• Modify your settings and rules to customize what types of comments Ellipsis leaves. And don't forget to react with 👍 or 👎 to teach Ellipsis.

1. src-tauri/tauri.conf.json:48

• Draft comment:
  Security: Adding external script sources introduces risk. Ensure these PostHog domains are trusted and monitored to prevent potential vulnerabilities.
• Reason this comment was not posted:
  Comment did not seem useful. Confidence is useful = 0% <= threshold 50% The comment is asking the author to ensure that the PostHog domains are trusted and monitored, which falls under asking the author to ensure something is done. This violates the rule against asking the author to ensure behavior is intended or to double-check things.

2. src-tauri/tauri.conf.json:48

• Draft comment:
  Best Practice: Document this CSP change and verify that no additional subdomains or future endpoints are needed for PostHog integration.
• Reason this comment was not posted:
  Comment did not seem useful. Confidence is useful = 0% <= threshold 50% The comment is asking the PR author to document a change and verify future needs, which falls under asking for confirmation and ensuring behavior, which is against the rules.

Workflow ID: wflow_Qe4OZhY6ROfsWhPX

^{You can customize by changing your verbosity settings, reacting with 👍 or 👎, replying to comments, or adding code review rules.}