4 ms·
Is there a good reason to allow unsafe eval in the Content Security Policy?
by seanwilson 9y ago
Is there a good reason to allow unsafe eval in the Content Security Policy?
- mattbierner 9y agoNot really, except when you are first adding a CSP to an older site that relies on eval (probably in a some crazy old jquery library). The name 'unsafe-eval' and the fact that 'unsafe-eval' has to be explicitly enabled are strong hints that you should move off of it as soon as possible