google / google/strict-csp

Support wasm-unsafe-eval

Open
#68 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
TypeScript
Stars
49
Forks
11
PR merge metrics
No merged PRs in 30d

Description

Add an option for `wasm-unsafe-eval` https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Content-Security-Policy/script-src#unsafe_webassembly_execution

'strict-dynamic' does not cover webassembly loading as far as I can see. And activating unsafe-eval is broader than wasm-unsafe-eval

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.