CSP cleanup

Should help with #223.

lib/dataUrls.js

@@ -49,8 +49,8 @@
 					logging.verbose("Adding CSP header to", details);
 					setHeader(headers, {
 						name: "Content-Security-Policy",
-						value: `object-src ${cspMatch}; frame-src ${cspMatch}; worker-src ${cspMatch}; child-src ${cspMatch}; ` +
-							"report-to https://canvasblocker.invalid/; report-uri https://canvasblocker.invalid/"
+						value: `object-src ${cspMatch}; frame-src ${cspMatch}`
+							// + "; report-to https://canvasblocker.invalid/; report-uri https://canvasblocker.invalid/"
 					});
 				}
 				return {

releaseNotes.txt

@@ -16,6 +16,7 @@ Version 0.5.3:
 		- popup text not readable in some dark themes
 		- display conditions for notification settings
 		- page action not useable with a lot of notifications
+		- blocking of blob-worker broke some pages
 	
 	known issues:
 		- if a data URL is blocked the page action button does not appear