MailMergeP icon indicating copy to clipboard operation
MailMergeP copied to clipboard

Published 20 hours ago • verified publisher icon siefkenj

Remove `unsave-eval`

Open siefkenj opened this issue 5 months ago • 2 comments

Currently unsafe-eval is used in MailMergeP. It is (was?) required for the nunjucks templating engine.

Thunderbird.net no longer allows unsafe-eval so this needs to be disabled for the extension to be republished.

siefkenj avatar Jun 12 '25 15:06 siefkenj

Here is a nunjucks issue about usafe-eval that might help understand what needs to be done https://github.com/mozilla/nunjucks/issues/1383#issuecomment-983077987

ws333 avatar Jun 12 '25 15:06 ws333

A Handlebars issue where they show how they managed to remove usafe-eval from the CSP https://github.com/handlebars-lang/handlebars.js/issues/1934

ws333 avatar Jun 12 '25 15:06 ws333