mirror of
https://github.com/nextcloud/server.git
synced 2026-06-11 09:42:09 -04:00
41f2d912d2
If a page has a Content Security Policy header and the `script-src` (or `default-src`) directive does not contain neither `wasm-unsafe-eval` nor `unsafe-eval` loading and executing WebAssembly is blocked in the page (although it is still possible to load and execute WebAssembly in a worker thread). Although the Nextcloud classes to manage the CSP already supported allowing `unsafe-eval` this affects not only WebAssembly, but also the `eval` operation in JavaScript. To make possible to allow WebAssembly execution without allowing JavaScript `eval` this commit adds support for allowing `wasm-unsafe-eval`. Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com> |
||
|---|---|---|
| .. | ||
| acceptance | ||
| apps | ||
| blueprints | ||
| Core | ||
| data | ||
| docker | ||
| lib | ||
| objectstore | ||
| Test/Repair/Owncloud | ||
| travis | ||
| apps.php | ||
| bootstrap.php | ||
| drone-run-integration-tests.sh | ||
| drone-run-php-tests.sh | ||
| drone-wait-objectstore.sh | ||
| enable_all.php | ||
| karma.config.js | ||
| phpunit-autotest-external.xml | ||
| phpunit-autotest.xml | ||
| preseed-config.php | ||
| redis-cluster.config.php | ||
| redis.config.php | ||
| startsessionlistener.php | ||