From 51d15c1776a324f13c9caa3a12e9e7699d75c989 Mon Sep 17 00:00:00 2001
From: Michael Telatynski <7t3chguy@gmail.com>
Date: Wed, 26 Apr 2023 10:59:16 +0100
Subject: [PATCH] Improve Content-Security-Policy

---
 src/vector/index.html | 2 +-
 webpack.config.js     | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/src/vector/index.html b/src/vector/index.html
index e416ef28188..89512ab36ac 100644
--- a/src/vector/index.html
+++ b/src/vector/index.html
@@ -26,7 +26,7 @@
     <meta http-equiv="Content-Security-Policy" content="
         default-src 'none';
         style-src 'self' 'unsafe-inline' <%= csp_extra_source %>;
-        script-src 'self' 'unsafe-eval' https://www.recaptcha.net https://www.gstatic.com <%= csp_extra_source %>;
+        script-src 'self' 'wasm-unsafe-eval' https://www.recaptcha.net/recaptcha/ https://www.gstatic.com/recaptcha/ <%= csp_extra_source %>;
         img-src * blob: data:;
         connect-src *;
         font-src 'self' data: <%= csp_extra_source %>;
diff --git a/webpack.config.js b/webpack.config.js
index 28d60af8a7f..2b50a20e24f 100644
--- a/webpack.config.js
+++ b/webpack.config.js
@@ -99,8 +99,8 @@ module.exports = (env, argv) => {
 
     const development = {};
     if (devMode) {
-        // High quality, embedded source maps for dev builds
-        development["devtool"] = "eval-source-map";
+        // Embedded source maps for dev builds, can't use eval-source-map due to CSP
+        development["devtool"] = "inline-source-map";
     } else {
         if (process.env.CI_PACKAGE) {
             // High quality source maps in separate .map files which include the source. This doesn't bulk up the .js