Pagefind issue with CSP

[torn4dom4n]

I’m not sure if this is a bug or if I’ve configured something incorrectly, but the search doesn’t seem to work for my Vietnamese content.

When I try to search, the results don’t show anything related to my site’s content, even though the text clearly exists in the repository. I’ve attached a screenshot showing the issue.

This is my repo: https://github.com/MedPocket/18-months

[HiDeoo]

Thanks for the report 🙌

Tested your repo by building and previewing locally and everything works as expected. Altho, checking the hosted version reveal the following console error:

Failed to load the Pagefind WASM:

CompileError: WebAssembly.instantiate(): Compiling or instantiating WebAssembly module violates the following Content Security policy directive because 'unsafe-eval' is not an allowed source of script in the following Content Security Policy directive: 

And indeed, your page is served with a content-security-policy response header:

default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src * blob: data:; font-src 'self' https://fonts.gstatic.com; connect-src *; frame-src 'none'; object-src 'none'

I would assume this one is automatically added by your host based on a feature you enabled or something similar?

This is not specific to Pagefind but mostly CSP and WebAssembly in general but you can find more details and solutions in this section: https://pagefind.app/docs/hosting/#content-security-policy-csp

[torn4dom4n]

Oh, thanks for this.