[Bug] incompatible with strict CSP settings (when no unsafe-eval allowed) - Githubissues

storybookjs / react-inspector

🔍 Power of Browser DevTools inspectors right inside your React app

https://5d8cb665bc622e0020296079-dippbxxgcq.chromatic.com/

MIT License

774 stars 95 forks source link

[Bug] incompatible with strict CSP settings (when no unsafe-eval allowed) #141

Open wereHamster opened 3 years ago

wereHamster commented 3 years ago

Describe the bug

When react-inspector is used a web page which uses strict CSP setting (doesn't allow unsafe-eval), it crashes.

It's because the dist build (not only the cjs version but even the es version!) uses Function() to create and execute dynamic code. See line 744 in https://unpkg.com/browse/react-inspector@5.1.1/dist/es/react-inspector.js.

Expected behavior

The dist build uses modern syntax and language features and leaves downcompiling to the user.

Screenshots and/or logs