提交10

tax-asst-client/src/main/index.ts

@@ -27,6 +27,22 @@ function createWindow(): void {
     mainWindow.show()
   })
 
+  const allowedOrigins = [
+    'http://192.168.0.117:8092',
+    'https://your-production-domain.com'
+  ];
+
+  mainWindow.webContents.session.webRequest.onBeforeSendHeaders(
+    (details, callback) => {
+      const { origin } = new URL(details.url);
+      if (allowedOrigins.includes(origin)) {
+        callback({ requestHeaders: details.requestHeaders });
+      } else {
+        callback({ cancel: true }); // 拦截非白名单请求
+      }
+    }
+  );
+
   mainWindow.webContents.setWindowOpenHandler((details) => {
     shell.openExternal(details.url)
     return { action: 'deny' }