Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

unsafe-eval is not allowed with CSP #35

Open
frozenamazon opened this issue May 30, 2017 · 4 comments
Open

unsafe-eval is not allowed with CSP #35

frozenamazon opened this issue May 30, 2017 · 4 comments

Comments

@frozenamazon
Copy link

I am using Framework7 together with the baked in Template7. In my html, I have included the meta tag to include Content-Security-Policy.

Expected Behavior
Should work with CSP?

Actual Behavior
'Uncaught EvalError: Refused to evaluate a string as Javascript because 'unsafe-eval' is not an allowed source of script in the following Content Security Policy directive: "default-src 'self'"
at eval()
at o (framework7.js:13994)

@marti1125
Copy link

I have the same bug

@sherpa-nimesh
Copy link

I am experiencing the same issue and is a blocker for me. Is it going to be fixed soon ?

@ZanderBrown
Copy link

Unfortunately this isn't exactly a 'quick fix' issue

@jhoelzel
Copy link

there is no way around this, there are 3 evals that i dont think are replaceable

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

5 participants