Skip to content

New Firefox CSP blocks WebAssembly.instantiate()

After rebasing the lox client integration with Tor Browser (team#116 (closed)), I got a new error when trying to run the lox client code from the Preferences menu:

eval() and eval-like uses are not allowed in the Parent Process or in System Contexts (Blocked usage in “chrome://browser/content/torpreferences/lox/lox_wasm.js”)
`WebAssembly.instantiateStreaming` failed because your server does not serve wasm with `application/wasm` MIME type. Falling back to `WebAssembly.instantiate` which is slower. Original error:
 CompileError: call to WebAssembly.instantiateStreaming() blocked by CSP
    load chrome://browser/content/torpreferences/lox/lox_wasm.js:154
    init chrome://browser/content/torpreferences/lox/lox_wasm.js:312

eval() and eval-like uses are not allowed in the Parent Process or in System Contexts (Blocked usage in “chrome://browser/content/torpreferences/lox/lox_wasm.js”)
Could not request a lox open invitation CompileError: call to WebAssembly.instantiate() blocked by CSP
    load chrome://browser/content/torpreferences/lox/lox_wasm.js:167
    requestOpenInvite chrome://browser/content/torpreferences/lox/lox.js:36

The current branch I'm working on: https://gitlab.torproject.org/cohosh/tor-browser/-/commits/lox-115.4.0esr-13.5-1