Merge pull request #10 from GandalfDG/bugfix_altcha_csp

move to altcha dist_external to elide dependency on blob source in CSP

README.md

@@ -8,7 +8,7 @@ This is a work in progress.
 - Search on DuckDuckGo and your results will be checked against known slop domains and paths so anything known to be slop will appear as a red link
 
 ## TODOs
-- Implement signup with email verification
+- Implement signup with email verification ✅
 - Enable link checking without signup using a proof-of-work check to limit bot access to API
 - Enable voting on reported slop to get rid of false reports
 - Improve user experience

manifest.json

@@ -1,7 +1,7 @@
 {
     "manifest_version": 2,
     "name": "Slop Farmer",
-    "version": "0.5.2",
+    "version": "0.5.4",
 
     "author": "Jack Case",
     "description": "Crowd-source AI slop pages and domains",
@@ -13,7 +13,7 @@
         "*://*.duckduckgo.com/*"
     ],
 
-    "content_security_policy": "script-src 'self' 'wasm-unsafe-eval'; object-src 'self'; worker-src 'self'",
+    "content_security_policy": "script-src 'self' 'wasm-unsafe-eval'; worker-src 'self'",
 
     "browser_action": {
         "default_title": "Slop Farmer",

pages/action_popup.html

@@ -5,8 +5,11 @@
     <!-- <meta name="viewport" content="width=device-width, initial-scale=1.0"> -->
     <!-- <script async defer src="https://cdn.jsdelivr.net/gh/altcha-org/altcha/dist/altcha.min.js" type="module"></script> -->
     <script async src="/scripts/browser-action.js" type="module"></script>
-    <script async defer src="/scripts/altcha/dist/altcha.js" type="module"></script>
+    <script async defer src="/scripts/altcha/dist_external/altcha.js" type="module"></script>
+    <script async defer src="/scripts/altcha/dist_external/worker.js" type="module"></script>
+
     <link rel="stylesheet" href="/styles/bulma/bulma.min.css">
+    <link rel="stylesheet" href="/scripts/altcha/dist_external/altcha.css">
     <title>Slop Farmer</title>
 </head>