Re: Secure dynamic JS compilation under CSP

Hi John:

On Thu, Jul 19, 2012 at 10:45 AM, John J Barton <johnjbarton@johnjbarton.com
> wrote:

> Hi. I was looking into converting my application to use CSP when I learned
> that neither eval nor new Function() are allowed. I have a large
> application that uses these features to compile JS at runtime. I am
> wondering what alternatives are available.
>

You can use 'unsafe-eval' to allow eval


-- 
-Eric