javascript - Content Security Polisy (CSP) - why I need 'unsafe-eval' rule? -


i trying set csp headers in vue 2.0 app , have problem 'eval' policy.

when use 'unsafe-eval' - it's working fine. when rid of (i know should) scripts stop working. there no error in console. if put eval() somewhere in code intentionally - error in console.

i searched whole project (including libs) "eval" , "new function" can't find usage of them.

so maybe there other functions meet 'eval' rules? using vue, code built browserify + vueify.


Comments

Popular posts from this blog

neo4j - finding mutual friends in a cypher statement starting with three or more persons -

php - How to remove letter in front of the word laravel -

minify - Minimizing css files -