You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I recently added a content security policy to my site and now I'm seeing this error: nextZero EvalError: Refused to evaluate a string as JavaScript because 'unsafe-eval' is not an allowed source of script in the following Content Security Policy directive: "script-src 'self' blob:".. It's because this library is using an eval call here:
I recently added a content security policy to my site and now I'm seeing this error:
nextZero EvalError: Refused to evaluate a string as JavaScript because 'unsafe-eval' is not an allowed source of script in the following Content Security Policy directive: "script-src 'self' blob:".
. It's because this library is using aneval
call here:browser-image-compression/lib/web-worker.js
Line 35 in 0191a7a
I'm wondering if this can be rewritten to use a different parsing strategy. Using
eval
is generally discouraged.The text was updated successfully, but these errors were encountered: