Add 'unsafe-eval' to CSP for CFG viewer webview

asgerf · asgerf · commit 66fc839960be · 2026-04-10T11:25:20.000Z
Otherwise the webview doesn't work when built locally
diff --git a/extensions/ql-vscode/src/common/vscode/webview-html.ts b/extensions/ql-vscode/src/common/vscode/webview-html.ts
@@ -80,7 +80,7 @@ export function getHtmlForWebview(
   <head>
     <meta http-equiv="Content-Security-Policy"
           content="default-src 'none'; script-src 'nonce-${nonce}'${
-            allowWasmEval ? " 'wasm-unsafe-eval'" : ""
+            allowWasmEval ? " 'wasm-unsafe-eval' 'unsafe-eval'" : ""
           }; font-src ${fontSrc}; style-src ${styleSrc}; connect-src ${
             webview.cspSource
           };">
