a1batross
/
pleroma
1
0
Fork 0
Code Issues 1 Pull Requests Releases Wiki Activity

Merge remote-tracking branch 'origin/flash-support-csp' into emr_develop

This commit is contained in:
a1batross 2022-08-31 00:13:20 +02:00
parent 14c38dafa6 200f1b0e89
commit 6f23d0ec28
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
lib/pleroma/web/plugs/http_security_plug.ex
View File

@ -117,7 +117,9 @@ defmodule Pleroma.Web.Plugs.HTTPSecurityPlug do
if Config.get(:env) == :dev do if Config.get(:env) == :dev do
"script-src 'self' 'unsafe-eval'" "script-src 'self' 'unsafe-eval'"
else else
"script-src 'self'" # TODO right now unsafe-eval is needed for WASM to load in chrome
# see: https://github.com/WebAssembly/content-security-policy/issues/7
"script-src 'self' 'unsafe-eval'"
end end
report = if report_uri, do: ["report-uri ", report_uri, ";report-to csp-endpoint"] report = if report_uri, do: ["report-uri ", report_uri, ";report-to csp-endpoint"]