From 84ad82da7401cfb9306e4f39ecfe005f20127baa Mon Sep 17 00:00:00 2001 From: sawa-zen Date: Wed, 11 Mar 2026 09:46:07 +0900 Subject: [PATCH] fix: update wasm-bindgen to 0.2.109 for CSP compatibility wasm-bindgen 0.2.109 removed the `new Function("return this")` fallback for getting the global object (PR wasm-bindgen/wasm-bindgen#4910), which required `'unsafe-eval'` in Content-Security-Policy `script-src`. With this update, applications using @dimforge/rapier3d-compat can use the more restrictive `'wasm-unsafe-eval'` instead of `'unsafe-eval'`, blocking JavaScript eval() while still allowing WebAssembly compilation. Refs: https://github.com/dimforge/rapier.js/issues/366 --- builds/prepare_builds/templates/Cargo.toml.tera | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/builds/prepare_builds/templates/Cargo.toml.tera b/builds/prepare_builds/templates/Cargo.toml.tera index af9756d1..a31287d5 100644 --- a/builds/prepare_builds/templates/Cargo.toml.tera +++ b/builds/prepare_builds/templates/Cargo.toml.tera @@ -38,7 +38,7 @@ rapier{{ dimension }}d = { version = "0.30.1", features = [ # The explicit dependency to parry only needed to pin the patch version. parry{{ dimension }}d = { version = "^0.25.3" } ref-cast = "1" -wasm-bindgen = "0.2.100" +wasm-bindgen = "0.2.109" js-sys = "0.3" nalgebra = "0.34" serde = { version = "1", features = ["derive", "rc"] }