CSP error - Refused to compile or instantiate WebAssembly module because 'wasm-eval' is not an allowed source of script in the following Content Security Policy directive

[pablogravielseo]

Hi, I got the following error: Refused to compile or instantiate WebAssembly module because 'wasm-eval' is not an allowed source of script in the following Content Security Policy directive:

I have tried to add "wasm-eval" in CSP but nothing, same error appears, I have searched about too but nothing.

[puzrin]

WebAssembly/content-security-policy#7

Seems you need unsafe-eval. Type error message in google and see results.

pica/dist/pica.js

Line 1467 in e12af7c

var instance = new WebAssembly.Instance(module, {});

Appropriate code is wrapped into try/catch, don't know why this is not handled. If you have idea how to improve detection logic - let me know.

[puzrin]

Does pica fallback to JS implementation or crash?

[pablogravielseo]

Hi @puzrin, the value "unsafe-eval" is already present in script source and the same error continue.
Seems that fallback to JS implementation.

I'm still looking for a solution.

[puzrin]

If pica works (resize images) - then issue not for this repo.