[Warning] [blocked] The page at https://xxxx.html was not allowed to run insecure content from knb://knb.js.

[CassielX]

I am trying to load a URL with a specific scheme through the HTTPS main document to implement the function of local data interception and feedback on the iOS end's WKWebView. I have set a custom scheme interceptor, but I cannot receive related calls in the callback method:

-(void)webView:(nonnull WKWebView *)webView startURLSchemeTask:(nonnull id<WKURLSchemeTask>)urlSchemeTask



In the H5, I set the Content-Security-Policy as follows:

<meta http-equiv="Content-Security-Policy" content="script-src knb:">
......
<script src="knb://knb.js"></script>
<img src="knb://knb2.js"></img>

I can intercept knb://knb2.js, but I cannot receive knb://knb.js.

When inspecting in the safari browser, it shows
[Warning] [blocked] The page at https://xxxx.html was not allowed to run insecure content from knb://knb.js.



Is there anything else I need to set? Or does it not support this kind of loading at all?

[CassielX]

Not only in iOS 16

[Radar WebKit Bug Importer]

<rdar://problem/122735268>