search

BorisMoore / jquery-tmpl

The original official jQuery Templates plugin. This project was maintained by the jQuery team as an official jQuery plugin. It is no longer in active development, and has been superseded by JsRender.
3.23k stars 1.01k forks source link

call to eval() or related function blocked by CSP #148

Closed timkuijsten closed 13 years ago

timkuijsten commented 13 years ago

When trying to use jquery-tmpl beta1 on a site that uses the following Content Security Policy: "X-Content-Security-Policy: allow 'self'" [1]

Firefox halts the execution of jquery-tmpl with the following error: call to Function() blocked by CSP [error] "');}return __;"

on rule number 359

It also shows the following hint: CSP: Directive "eval script base restriction" violated call to eval() or related function blocked by CSP

[1] https://developer.mozilla.org/en/Security/CSP/Using_Content_Security_Policy#Example_1

rdworth commented 13 years ago

Thanks for taking the time to submit this issue. Just wanted to let you know this plugin is no longer being actively developed or maintained by the jQuery team. See README for more info.

timkuijsten commented 13 years ago

alright, tnx for notifying me.