From aadfce5d8d8ae358d39b46e7a08ada080aa61aac Mon Sep 17 00:00:00 2001 From: velzie Date: Wed, 31 Jul 2024 11:59:31 -0400 Subject: [PATCH] delete permissions-policy header --- src/worker/fetch.ts | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/src/worker/fetch.ts b/src/worker/fetch.ts index 842bc5e..8e31fc5 100644 --- a/src/worker/fetch.ts +++ b/src/worker/fetch.ts @@ -102,11 +102,7 @@ async function handleResponse( } break; case "script": - responseBody = rewriteJs( - await response.arrayBuffer(), - url, - self.$scramjet.config.codec.encode - ); + responseBody = rewriteJs(await response.arrayBuffer(), url); // Disable threading for now, it's causing issues. // responseBody = await this.threadpool.rewriteJs(await responseBody.arrayBuffer(), url.toString()); break; @@ -144,6 +140,10 @@ async function handleResponse( if (responseHeaders["accept"] === "text/event-stream") { responseHeaders["content-type"] = "text/event-stream"; } + + // scramjet runtime can use features that permissions-policy blocks + delete responseHeaders["permissions-policy"]; + if (crossOriginIsolated) { responseHeaders["Cross-Origin-Embedder-Policy"] = "require-corp"; }