javascript - Content Security Polisy (CSP) - why I need 'unsafe-eval' rule? -
i trying set csp headers in vue 2.0 app , have problem 'eval' policy.
when use 'unsafe-eval' - it's working fine. when rid of (i know should) scripts stop working. there no error in console. if put eval() somewhere in code intentionally - error in console.
i searched whole project (including libs) "eval" , "new function" can't find usage of them.
so maybe there other functions meet 'eval' rules? using vue, code built browserify + vueify.
Comments
Post a Comment