diff --git a/ngaccount/src/main.rs b/ngaccount/src/main.rs
index 1a682a7..20653b5 100644
--- a/ngaccount/src/main.rs
+++ b/ngaccount/src/main.rs
@@ -259,7 +259,11 @@ async fn main() -> anyhow::Result<()> {
     headers.insert(
         "Content-Security-Policy",
         HeaderValue::from_static(
+            #[cfg(debug_assertions)]
+            "default-src 'self' data:; connect-src ipc: https://ipc.localhost 'self' http://192.168.192.2:3031",
+            #[cfg(not(debug_assertions))]
             "default-src 'self' data:; connect-src ipc: https://ipc.localhost 'self'",
+            
         ),
     );
 
diff --git a/ngaccount/web/index.html b/ngaccount/web/index.html
index a05053c..842be0a 100644
--- a/ngaccount/web/index.html
+++ b/ngaccount/web/index.html
@@ -56,6 +56,12 @@
 
   <body>
     <div id="app"></div>
+    <script>
+      window.__TAURI__.convertFileSrc = function convertFileSrc(filePath, protocol = 'asset') {
+        const path = encodeURIComponent(filePath)
+        return `${protocol}://localhost/${path}`
+      }
+    </script>
     <script type="module" src="/src/main.js"></script>
   </body>
 </html>
\ No newline at end of file
