diff --git a/lib/pleroma/web/plugs/http_security_plug.ex b/lib/pleroma/web/plugs/http_security_plug.ex
index 7a987a30b..34895c8d5 100644
--- a/lib/pleroma/web/plugs/http_security_plug.ex
+++ b/lib/pleroma/web/plugs/http_security_plug.ex
@@ -117,8 +117,6 @@ defp csp_string do
       if Config.get(:env) == :dev do
         "script-src 'self' 'unsafe-eval'"
       else
-        # TODO right now unsafe-eval is needed for WASM to load in chrome
-        # see: https://github.com/WebAssembly/content-security-policy/issues/7
         "script-src 'self' 'wasm-unsafe-eval'"
       end