diff options
| author | Henry Jameson <me@hjkos.com> | 2021-04-12 00:38:25 +0300 |
|---|---|---|
| committer | Mark Felder <feld@feld.me> | 2022-11-17 12:03:01 -0500 |
| commit | db76ea578a550a4cbc0298d428b9c57ba605b276 (patch) | |
| tree | 13e6cb79fbde8ce096c30b947d8e32feb7c0616c /lib | |
| parent | 0e1356ef9cc8c97afcc3242cfb8182a706c85276 (diff) | |
| download | pleroma-db76ea578a550a4cbc0298d428b9c57ba605b276.tar.gz pleroma-db76ea578a550a4cbc0298d428b9c57ba605b276.zip | |
try to fix ruffle on chrome
Diffstat (limited to 'lib')
| -rw-r--r-- | lib/pleroma/web/plugs/http_security_plug.ex | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/lib/pleroma/web/plugs/http_security_plug.ex b/lib/pleroma/web/plugs/http_security_plug.ex index cd1bae235..3ee48062e 100644 --- a/lib/pleroma/web/plugs/http_security_plug.ex +++ b/lib/pleroma/web/plugs/http_security_plug.ex @@ -117,7 +117,9 @@ defmodule Pleroma.Web.Plugs.HTTPSecurityPlug do if Config.get(:env) == :dev do "script-src 'self' 'unsafe-eval'" else - "script-src 'self'" + # TODO right now unsafe-eval is needed for WASM to load in chrome + # see: https://github.com/WebAssembly/content-security-policy/issues/7 + "script-src 'self' 'unsafe-eval'" end report = if report_uri, do: ["report-uri ", report_uri, ";report-to csp-endpoint"] |