summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorHenry Jameson <me@hjkos.com>2021-04-12 00:38:25 +0300
committerHenry Jameson <me@hjkos.com>2021-04-12 00:48:33 +0300
commit200f1b0e89e6672ffe451e6accef1be154c69492 (patch)
tree8767f3ee52264c9ac31a12325e68e735843f81df
parentf8cef70416b5da5fabdac89ad95589e735fe85a9 (diff)
try to fix ruffle on chrome
-rw-r--r--lib/pleroma/web/plugs/http_security_plug.ex4
1 files changed, 3 insertions, 1 deletions
diff --git a/lib/pleroma/web/plugs/http_security_plug.ex b/lib/pleroma/web/plugs/http_security_plug.ex
index 0025b042a..1dcf02e1a 100644
--- a/lib/pleroma/web/plugs/http_security_plug.ex
+++ b/lib/pleroma/web/plugs/http_security_plug.ex
@@ -116,7 +116,9 @@ defmodule Pleroma.Web.Plugs.HTTPSecurityPlug do
if Config.get(:env) == :dev do
"script-src 'self' 'unsafe-eval'"
else
- "script-src 'self'"
+ # TODO right now unsafe-eval is needed for WASM to load in chrome
+ # see: https://github.com/WebAssembly/content-security-policy/issues/7
+ "script-src 'self' 'unsafe-eval'"
end
report = if report_uri, do: ["report-uri ", report_uri, ";report-to csp-endpoint"]