diff --git a/nextjs/csp/policies/app.ts b/nextjs/csp/policies/app.ts index c1b5355516..e00490d5d2 100644 --- a/nextjs/csp/policies/app.ts +++ b/nextjs/csp/policies/app.ts @@ -69,7 +69,9 @@ export function app(): CspDev.DirectiveDescriptor { // next.js generates and rebuilds source maps in dev using eval() // https://github.com/vercel/next.js/issues/14221#issuecomment-657258278 - config.app.isDev ? KEY_WORDS.UNSAFE_EVAL : '', + // polkadot api doesn't work without 'usafe-eval' csp + // because webassembly uses eval under the hood + KEY_WORDS.UNSAFE_EVAL, // hash of ColorModeScript '\'sha256-e7MRMmTzLsLQvIy1iizO1lXf7VWYoQ6ysj5fuUzvRwE=\'',