search

camunda / camunda-modeler

An integrated modeling solution for BPMN, DMN and Forms based on bpmn.io.
https://camunda.com/products/modeler
MIT License
1.47k stars 472 forks source link

[RC.3] Feel Editor and all related functions are broken #4398

Closed marstamm closed 1 week ago

marstamm commented 1 week ago

Describe the bug

I cannot use the FEEL editor or Forms.

Steps to reproduce

  1. Model a service task
  2. try to use the FEEL-Editor
  3. It does not work

Expected behavior

I can use it

Environment

Additional context

This is caused by the FEEL editor using new Function(), which is disallowed if unsafe-eval CSP header is not set. This was not caught during integration because it is allowed in the dev setup. This only breaks in release builds.

https://github.com/bpmn-io/feel-editor/blob/75b6e9897745386f86af7ac56b45f7dc70ed830e/src/language/index.js#L27

marstamm commented 1 week ago

Closed with https://github.com/camunda/camunda-modeler/pull/4399