diff options
| author | csett86 <csett86@web.de> | 2021-07-31 11:41:17 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2021-07-31 11:41:17 +0200 |
| commit | 625b8b828f01b063810976c0a8d8871467117824 (patch) | |
| tree | a6ae49cbeaa2b3893f67e2558c844432935baa1c /README.md | |
| parent | 9569a46f8a065a8d2da8660502c84eb0f8045fc3 (diff) | |
Enable WebAssemblyCSP flag so wasm-eval CSP can be used instead of requiring unsafe-eval (#617)
Diffstat (limited to 'README.md')
| -rw-r--r-- | README.md | 2 |
1 files changed, 1 insertions, 1 deletions
@@ -47,7 +47,7 @@ X-Frame-Options "DENY"; ``` A working Content Security Policy looks like that: ``` -Content-Security-Policy "img-src 'self' 'unsafe-inline' data:; style-src 'self' 'unsafe-inline'; font-src 'self'; object-src 'none'; base-uri 'self'; form-action 'none';"; +Content-Security-Policy "img-src 'self' 'unsafe-inline' data:; script-src 'self' 'unsafe-inline' 'wasm-eval'; style-src 'self' 'unsafe-inline'; font-src 'self'; object-src 'none'; base-uri 'self'; form-action 'none';"; ``` ## Development |