Skip to content

Commit 727f9e5

Browse files
authored
Add 'wasm-unsafe-eval' to custom CSP (fix #906)
It seems that some dependencies (at least argon2-browser) require allowing WebAssembly at the CSP level. Recent Firefox allows that by default, but having your own CSP means this extension won't be able to benefit from this automatically.
1 parent 2f897c9 commit 727f9e5

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

manifests/manifest-firefox.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -57,5 +57,5 @@
5757
"https://graph.microsoft.com/me/*",
5858
"https://login.microsoftonline.com/common/oauth2/v2.0/token"
5959
],
60-
"content_security_policy": "script-src 'self'; font-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; connect-src https://www.google.com/ https://*.dropboxapi.com https://www.googleapis.com/ https://accounts.google.com/o/oauth2/revoke https://login.microsoftonline.com/common/oauth2/v2.0/token https://graph.microsoft.com/; default-src 'none'"
60+
"content_security_policy": "script-src 'self' 'wasm-unsafe-eval'; font-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; connect-src https://www.google.com/ https://*.dropboxapi.com https://www.googleapis.com/ https://accounts.google.com/o/oauth2/revoke https://login.microsoftonline.com/common/oauth2/v2.0/token https://graph.microsoft.com/; default-src 'none'"
6161
}

0 commit comments

Comments
 (0)