3 ms·
The problem with connect-src 'none' is that is does not allow the webassembly to load than (as this is loaded via js) `Content Security Policy: The page’s sett
by l1am0 6y ago
The problem with connect-src 'none' is that is does not allow the webassembly to load than (as this is loaded via js)
`Content Security Policy: The page’s settings blocked the loading of a resource at http://localhost:8080/wasm/wasm.wasm http://localhost:8080/wasm/wasm.wasm (“connect-src”).`
For now I only added `default-src: 'self'; form-action 'none'` to the index.html
- zaroth 6y agoAnd according to HN that only took you 1 hour and 17 minutes (but I guess "2 hours ago" could be rounded down). Way to under-promise and over-deliver!
- ahazred8ta 6y agohttps://bs.parity.io/#-BananaSplit-shamir https://bs.parity.io/#-BananaSplit-shamir uses different approaches to force offline use.
- jerry1979 6y agoWhy not just embed the wasm directly in the webpage?
- l1am0 6y agoFunny I came up with the same idea about 10min ago :D It is now directly embedded via a data uri. This allows to set `connect-src: 'data'`