- From: lopesdasilva <notifications@github.com>
- Date: Tue, 22 Jan 2019 01:52:19 -0800
- To: whatwg/fetch <fetch@noreply.github.com>
- Cc: Subscribed <subscribed@noreply.github.com>
Received on Tuesday, 22 January 2019 09:52:40 UTC
Hi, I need a clarification on this: I'm using whatwg-fetch polyfill on a server with 'strict' CSP's ` default-src 'none'; object-src 'self'; script-src 'self' 'unsafe-inline' ; connect-src 'self' ; img-src 'self'; style-src 'self' 'unsafe-inline'; font-src 'self' data:; frame-src 'self'` Currently i'm getting an error loading the script (although it's a browser with fetch support) `EvalError: Refused to evaluate a string as JavaScript because 'unsafe-eval' is not an allowed source of script in the following Content Security Policy directive: "script-src 'self' 'unsafe-inline' `  Thanks, Rui -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/whatwg/fetch/issues/861
Received on Tuesday, 22 January 2019 09:52:40 UTC