From b69a44596015f742a02bc5a476a68448023010c5 Mon Sep 17 00:00:00 2001
From: Marty Pradere <martyp@labkey.com>
Date: Mon, 29 Dec 2025 17:15:18 -0800
Subject: [PATCH] Add webpack protocol

---
 api/src/org/labkey/filters/ContentSecurityPolicyFilter.java | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/api/src/org/labkey/filters/ContentSecurityPolicyFilter.java b/api/src/org/labkey/filters/ContentSecurityPolicyFilter.java
index 8e96eaf7774..d47b5fd02cf 100644
--- a/api/src/org/labkey/filters/ContentSecurityPolicyFilter.java
+++ b/api/src/org/labkey/filters/ContentSecurityPolicyFilter.java
@@ -92,10 +92,10 @@ public String getHeaderName()
     static
     {
         // ReactJS hot reload uses localhost port 3001. If in dev mode, allow the browser to access that port for fonts
-        // and connections.
+        // and connections. Also allow webpack: protocol for source map loading by some external packages.
         if (AppProps.getInstance().isDevMode())
         {
-            registerAllowedSources("reactjs.hot.reload", Directive.Connection, "localhost:3001 ws://localhost:3001");
+            registerAllowedSources("reactjs.hot.reload", Directive.Connection, "localhost:3001 ws://localhost:3001 webpack:");
             registerAllowedSources("reactjs.hot.reload", Directive.Font, "localhost:3001");
         }
     }