diff --git a/packages/webamp/js/components/MilkdropWindow/Visualizer.tsx b/packages/webamp/js/components/MilkdropWindow/Visualizer.tsx index 99ca4154..aefb50d6 100644 --- a/packages/webamp/js/components/MilkdropWindow/Visualizer.tsx +++ b/packages/webamp/js/components/MilkdropWindow/Visualizer.tsx @@ -59,6 +59,11 @@ function Visualizer({ analyser, width, height }: Props) { meshWidth: 32, meshHeight: 24, pixelRatio: window.devicePixelRatio || 1, + // Webamp may support rendering Milkdrop presets from untrusted sources. + // By using `onlyUseWASM` here we instruct Butterchurn not to `eval` + // JavaScript code included in older Butterchurn preset `.json` files. + // https://jordaneldredge.com/blog/speeding-up-winamps-music-visualizer-with-webassembly/#security + onlyUseWASM: true, } ); _visualizer.connectAudio(analyser);