Add 'wasm-unsafe-eval' to CSP

Author: manisandro

src/qwc2_viewer.py

@@ -211,7 +211,7 @@ def qwc2_index(self, identity, params, request_url):
         # Inject CSP header and modify script tags
         nonce = secrets.token_urlsafe()
         csp = "; ".join([
-            "script-src 'nonce-%s' 'strict-dynamic'" % nonce,
+            "script-src 'nonce-%s' 'strict-dynamic' 'wasm-unsafe-eval'" % nonce,
             # "style-src 'nonce-%s'" % nonce # TODO
         ])
         if self.extra_csp_directives: