WebAssembly.Memory causes issues with content security policy
未关闭
还没有人认领这个 Issue。
- 主要语言
- JavaScript
- 星标
- 13.7k
- 派生
- 1.1k
- PR 合并指标
- 30 天内没有已合并 PR
描述
Safari throws an error when loading with a content security policy that doesn't include 'unsafe-eval' in script-src. It seems to be the odd man out. I don't know what can be done to work around it.
https://github.com/WebAssembly/content-security-policy/blob/master/proposals/CSP.md

贡献指南
从这里开始
- 先读完整个 Issue,再读项目的贡献指南。
- 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
- Fork 仓库,在一个分支上完成修改。
- 提交 Pull Request,并在描述里引用这个 Issue 编号。
调研方向
Start by reproducing the Safari error while loading sql.js under a script-src policy without 'unsafe-eval'. Read the linked WebAssembly CSP proposal and compare its guidance with the reported WebAssembly.Memory behavior. Done means identifying a viable workaround or clearly documenting that Safari cannot support this configuration.
由索引模型根据 Issue 内容生成。
评估
- 技术栈
- javascript, wasm
- 领域
- security, web-dev
- Issue 类型
- 缺陷
- 难度
- 4/5
- 预计耗时
- 3-5 天
- 活跃度
- 停滞
- 描述清晰度
- 需要澄清
- 新手友好度
- 28/100