Open
Description
Good morning, since January 20, 2025 we have encountered a blocking bug that prevents the rendering of PDF files:
Uncaught (in promise) RuntimeError: Aborted(CompileError: WebAssembly.instantiate(): Refused to compile or instantiate WebAssembly module because 'unsafe-eval' is not an allowed source of script in the following Content Security Policy directive: "default-src 'self' http: https: ws: wss: data: blob: 'unsafe-inline'"). Build with -sASSERTIONS for more info.
Desktop (please complete the following information):
- OS: Windows
- Browser Chrome not work (v. 131), Firefox at the moment yes
- React-pdf version a lot, like (3.1.9, 3.1.2, 4.1.6, )
We would like to avoid changing CSP policies to protect our applications from xss vulnerabilities
Do you know how to help us? Thank you in advance
Metadata
Metadata
Assignees
Labels
No labels