Update lib/pleroma/web/plugs/http_security_plug.ex

This commit is contained in:
HJ 2022-11-16 21:27:04 +00:00 committed by Mark Felder
parent db76ea578a
commit 79bd363a68

View file

@ -119,7 +119,7 @@ defp csp_string do
else
# TODO right now unsafe-eval is needed for WASM to load in chrome
# see: https://github.com/WebAssembly/content-security-policy/issues/7
"script-src 'self' 'unsafe-eval'"
"script-src 'self' 'wasm-unsafe-eval'"
end
report = if report_uri, do: ["report-uri ", report_uri, ";report-to csp-endpoint"]