commit: db76ea578a550a4cbc0298d428b9c57ba605b276
parent 0e1356ef9cc8c97afcc3242cfb8182a706c85276
Author: Henry Jameson <me@hjkos.com>
Date: Mon, 12 Apr 2021 00:38:25 +0300
try to fix ruffle on chrome
Diffstat:
1 file changed, 3 insertions(+), 1 deletion(-)
diff --git a/lib/pleroma/web/plugs/http_security_plug.ex b/lib/pleroma/web/plugs/http_security_plug.ex
@@ -117,7 +117,9 @@ defmodule Pleroma.Web.Plugs.HTTPSecurityPlug do
if Config.get(:env) == :dev do
"script-src 'self' 'unsafe-eval'"
else
- "script-src 'self'"
+ # TODO right now unsafe-eval is needed for WASM to load in chrome
+ # see: https://github.com/WebAssembly/content-security-policy/issues/7
+ "script-src 'self' 'unsafe-eval'"
end
report = if report_uri, do: ["report-uri ", report_uri, ";report-to csp-endpoint"]