till/managarten
1
0
Fork 0
mirror of https://github.com/Memo-2023/mana-monorepo.git synced 2026-05-14 23:01:09 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 4

fix(mukke): add unsafe-eval to CSP for Butterchurn shader compilation

Browse source 
Butterchurn (Milkdrop) uses eval() for preset/shader compilation which
was blocked by CSP. Add unsafe-eval to script-src for mukke only.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
Till JS 2026-03-23 10:04:25 +01:00
parent 376cfe881b
commit 94fead0873
1 changed files with 2 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apps/mukke/apps/web/src/hooks.server.ts
View file

@ -34,6 +34,8 @@ window.__PUBLIC_GLITCHTIP_DSN__ = "${PUBLIC_GLITCHTIP_DSN}";
connectSrc: [PUBLIC_MANA_CORE_AUTH_URL_CLIENT, PUBLIC_BACKEND_URL_CLIENT, S3_PUBLIC_ENDPOINT],
mediaSrc: [S3_PUBLIC_ENDPOINT, 'blob:'],
imgSrc: [S3_PUBLIC_ENDPOINT],
// Butterchurn (Milkdrop) uses eval() for shader/preset compilation
scriptSrc: ["'unsafe-eval'"],
});
return response;