Latest Release Breaks CSP Rules
Modal service for AngularJS - supports creating popups and modals via a service.
Brought to you by:
evanfcrane
Menu
▾
▴
#204 Latest Release Breaks CSP Rules
open
nobody
None
2017-03-10
2017-03-10
Anonymous
No
Originally created by: tylerFowler
The latest release distribution has this line:
var __cov_LJ6y9QsEYJy7cg83eFQGGg = Function('return this')();
Along with a bunch of paths to someone's local Windows machine, I assume that it was simply introduced by mistake but when you combine this line with sensible CSP rules browsers will complain that script-src: 'unsafe-eval' needs to be enabled.