pixi-gl-core icon indicating copy to clipboard operation
pixi-gl-core copied to clipboard

ContentSecurityPolicy unsafe-eval error

Open devdoomari opened this issue 8 years ago • 1 comments

I've introduced ContentSecurityPolicy (https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP) as the last frontend defense for my company's website.

And there's a line (https://github.com/pixijs/pixi-gl-core/blob/bae92f4d92e600317a847ace646484a9e483657a/src/shader/generateUniformAccessObject.js#L45) using:

Function(someString)

to generate a function, which generates a Content Security Policy unsafe-eval error.

devdoomari avatar Jan 12 '17 09:01 devdoomari

web games wrapped with cordova will also have to include unsafe-eval in the meta tag because of those same 2 lines that uses new Function

fczuardi avatar Feb 22 '17 02:02 fczuardi