google / csp-evaluator

https://csp-evaluator.withgoogle.com
Apache License 2.0
315 stars 45 forks source link

script-src 'wasm-unsafe-eval' reported as invalid #66

Open joergbaier opened 6 months ago

joergbaier commented 6 months ago

The csp-evaluator returns this message: 'wasm-unsafe-eval' seems to be an invalid CSP keyword.

However it seems to be implemented by most: https://caniuse.com/?search=wasm-unsafe-eval https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/script-src#unsafe_webassembly_execution