Mike Schall comments

Repositories
Issues
Comments

Results 12 comments of


                                            Mike Schall

Don't require unsafe-eval in CSP header

We follow all of those with the exception of the data-dojo-props. Unfortunately we use it a lot for widget initialization (applications with 1000+ screens). A few examples: **FilteringSelect** ```html data-dojo-props="required:false,...

Don't require unsafe-eval in CSP header

Dojo 1.16 still requires script-src 'self' 'unsafe-eval'; Here is a PR that should resolve the issue for most scenarios... https://github.com/dojo/dojo/pull/381 On Mon, Aug 3, 2020 at 7:49 AM acacia76810 wrote:...