jsqr loads worker by blob (inline) which breaks in strict CSP

nimiq / qr-scanner

Lightweight Javascript QR Code Scanner

https://nimiq.github.io/qr-scanner/demo

MIT License

2.35k stars 509 forks source link

jsqr loads worker by blob (inline) which breaks in strict CSP #221

Open piotrblasiak opened 1 year ago

piotrblasiak commented 1 year ago

If you have CSP (Content Security Policy) set to not accept blob: , then using this library fails even tho the docs say it will use the webpack mechanism for loading web worker scripts - which should be by script URL.

twistedpair commented 1 year ago

Is there an update on this issue? Perhaps a way to properly configure loading to use a non-blob loading mechanism?

jampy commented 9 months ago

any news on this?

nop33 commented 7 months ago

I am also interested in getting this fixed...

TheGreyDiamond commented 3 months ago

Still broken... Really sad because I really wanted to use this.