search

zalmoxisus / redux-devtools-extension

Redux DevTools extension.
MIT License
13.5k stars 1.01k forks source link

unsafe-eval question #822

Closed davidsmith2 closed 2 years ago

davidsmith2 commented 2 years ago

I work for a US government contractor. Our client's IT department is disallowing the use of this extension for the following reason:

The presence of “unsafe-eval” on the extension’s source code indicates that the extension can be used to execute source code.

This appears to be defined in the extension's manifest.json CSP definition:

https://github.com/zalmoxisus/redux-devtools-extension/blob/c220fd18d6fb4b0790a501ec4df0de52b5bee460/src/browser/extension/manifest.json#L64

Curious if any other potential users of the extension had run into this obstacle?

Methuselah96 commented 2 years ago

Closing since this repo is no longer active and the question was also asked here.