Skip to content

Commit

Permalink
Add 'wasm-unsafe-eval' to custom CSP (fix #906)
Browse files Browse the repository at this point in the history
It seems that some dependencies (at least argon2-browser) require allowing WebAssembly at the CSP level.
Recent Firefox allows that by default, but having your own CSP means this extension won't be able to benefit from this automatically.
  • Loading branch information
mozfreddyb authored May 23, 2022
1 parent 2f897c9 commit 727f9e5
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion manifests/manifest-firefox.json
Original file line number Diff line number Diff line change
Expand Up @@ -57,5 +57,5 @@
"https://graph.microsoft.com/me/*",
"https://login.microsoftonline.com/common/oauth2/v2.0/token"
],
"content_security_policy": "script-src 'self'; font-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; connect-src https://www.google.com/ https://*.dropboxapi.com https://www.googleapis.com/ https://accounts.google.com/o/oauth2/revoke https://login.microsoftonline.com/common/oauth2/v2.0/token https://graph.microsoft.com/; default-src 'none'"
"content_security_policy": "script-src 'self' 'wasm-unsafe-eval'; font-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; connect-src https://www.google.com/ https://*.dropboxapi.com https://www.googleapis.com/ https://accounts.google.com/o/oauth2/revoke https://login.microsoftonline.com/common/oauth2/v2.0/token https://graph.microsoft.com/; default-src 'none'"
}

0 comments on commit 727f9e5

Please sign in to comment.