request filter: whitelist "storage" subdomain, #312, closes #508

package.json

@@ -1,7 +1,7 @@
 {
   "name": "electron-mail",
   "description": "Unofficial ProtonMail Desktop App",
-  "version": "4.15.0",
+  "version": "4.15.1",
   "author": "Vladimir Yakovlev <desktop-app@protonmail.ch>",
   "license": "GPL-3.0",
   "homepage": "/~https://github.com/vladimiry/ElectronMail",

src/electron-main/web-request/index.ts

@@ -86,6 +86,10 @@ export function initWebRequestListenersByAccount(
         ...STATIC_ALLOWED_ORIGINS,
         webClient.entryApiUrl,
         webClient.entryUrl,
+        ((): string => {
+            const {hostname, protocol} = new URL(webClient.entryApiUrl);
+            return `${protocol}//storage.${hostname.split(".").slice(-2).join(".")}`; // proton-drive specific endpoint
+        })(),
     ].map(parseUrlOriginWithNullishCheck);
 
     // according to electron docs "only the last attached listener will be used" so no need to unsubscribe previously registered handlers