feat(electron-esbuild): remove COEP headers in document load

[josteph]

Fixes #12

Scenario:

1. HTML file, when retrieved, will fall through if (req.url === '/' || req.url === '') block resulting in the CORS header being set for the whole document
   

2. Let's say we want to add new worker file, which we need to add a new entryPoints in esbuild.renderer.config.js in order to bundle the worker file. Example: https://github.com/josteph/josteph-electron-esbuild/blob/912a2e9243c938d261fe91713b48debfe9ece4c3/config/esbuild.renderer.config.js

3. Project structure now:
   

Expected
Able to resolve http://localhost:9080/worker.js

Actual Behaviour
Blocked due these headers being set in HTML load:

res.setHeader('Cross-Origin-Embedder-Policy', 'require-corp')
res.setHeader('Cross-Origin-Opener-Policy', 'same-origin')

[Kiyozz]

I'm not sure what exactly this option does. Can you clarify for me? And why this fixe static files?

[josteph]

This doesn't fix static files. But it fixes if you try to transpile/compile more than one entryPoints in esbuild.
https://github.com/josteph/josteph-electron-esbuild/blob/912a2e9243c938d261fe91713b48debfe9ece4c3/config/esbuild.renderer.config.js

I've been playing around with it and chrome actually blocked the request by telling me about appending those specific headers into the response. Since it is localhost i think there would be no concern..

Let me know if this doesn't make sense.

---

About static files, i think you want to refer to buildResources option instead?

[Kiyozz]

By static files, I means files that are available on "/". If you want to add any images, or untranspiled js, css, etc. Like a server public path.

Your PR doesn't seem to fix the linked issue (#13), but another problem that is multiple esbuild renderer entrypoints. Maybe you could create a new issue more detailed?

[josteph]

@Kiyozz I have updated the PR description and this actually fixes #12 issue.
About COEP, the default value is unsafe-none.

[josteph]

Hi, is there any other concern for removing COEP headers in development mode?

[Kiyozz]

Hey josteph, thanks for your changes. I forgot to answer, I want to make a few tests before complete the pr but I did not find the time.

I think their is no problem!

[Kiyozz]

Thanks you for your work.

[josteph]

No, thank you for the great package!