Add wasm-unsafe-eval to default csp script-src header

2026-10-21 23:32:39 +02:00 · 2025-08-18 17:41:54 +02:00
parent 85123e51a4
commit 3eef1c216d
1 changed files with 1 additions and 1 deletions
@@ -172,7 +172,7 @@ async fn index(
            {
                let mut attrs = vec![
                    "default-src 'self'".to_string(),
-                    format!("script-src 'self' 'nonce-{nonce_b64}'"),
+                    format!("script-src 'self' 'wasm-unsafe-eval' 'nonce-{nonce_b64}'"),
                    "frame-ancestors 'none'".to_string(),
                ];
                attrs.extend(csp.custom_attributes.iter().cloned());