lephyrus / ngx-translate-messageformat-compiler

Advanced pluralization (and more) for ngx-translate, using standard ICU syntax which is compiled with the help of messageformat.js.
MIT License
93 stars 29 forks source link

Document need for CSP 'unsafe-eval' script-src #34

Closed Yogu closed 6 years ago

Yogu commented 6 years ago

The messageformat library only works if unsafe-eval is allowed in the Content-Security-Policy. I think this is worth mentioning in the README. This might be a reason why this compiler can't be used and it is likely that this is only discovered when preparing an application for production.