Refused to create a worker from blob

[JCKodel]

Refused to create a worker from 'blob:http://localhost:8080/87c22970-8fee-44d9-982e-00aafe130b22' because it violates the following Content Security Policy directive: "default-src * 'self' 'unsafe-inline' 'unsafe-eval' data: gap: content:". Note that 'worker-src' was not explicitly set, so 'default-src' is used as a fallback.

Current content security policy: default-src * 'self' 'unsafe-inline' 'unsafe-eval' data: gap: content:

I don't have the slightest idea of how content security policy works, so, it would be nice some light in the README.md =)

[sylvaindumont]

@JCKodel you have to add worker-src blob: to your csp header and script-src blob: as a fallback.
But If you want to keep it simple just add blob: at the end of your default-src

[developit]

@sylvaindumont want to PR that into the README?

[sylvaindumont]

sure #28

[developit]

Update: I've switched Greenlet over to use Data URIs. Should we update #28?

[developit]

Thanks, merged the PR!

[cochiseruhulessin]

Whats the point of using CSP if this is the solution?