search

nolimits4web / template7

Mobile-first JavaScript template engine
http://www.idangero.us/template7/
MIT License
657 stars 165 forks source link

unsafe-eval is not allowed with CSP #35

Open frozenamazon opened 7 years ago

frozenamazon commented 7 years ago

I am using Framework7 together with the baked in Template7. In my html, I have included the meta tag to include Content-Security-Policy.

Expected Behavior Should work with CSP?

Actual Behavior 'Uncaught EvalError: Refused to evaluate a string as Javascript because 'unsafe-eval' is not an allowed source of script in the following Content Security Policy directive: "default-src 'self'" at eval() at o (framework7.js:13994)

marti1125 commented 6 years ago

I have the same bug

sherpa-nimesh commented 6 years ago

I am experiencing the same issue and is a blocker for me. Is it going to be fixed soon ?

ZanderBrown commented 6 years ago

Unfortunately this isn't exactly a 'quick fix' issue

jhoelzel commented 6 years ago

there is no way around this, there are 3 evals that i dont think are replaceable