[TYPO3-dev] Content-Security-Policy eval()

[Steffen Gebert]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Dear Job,

thanks for your message.

Could you please be a bit more precise, where the eval() is used?

Do you already have a suggestion, how to replace it?

Kind regards
Steffen

- -- 
Steffen Gebert
TYPO3 Server Administration Team Member

TYPO3 .... inspiring people to share!
Get involved: http://typo3.org

My wish list:
https://www.amazon.de/registry/wishlist/922E3JYSQ7CV/ref=cm_wl_sb_v?sort=priority

On 21/12/14 13:21, Job Rutgers wrote:
> The use of the eval() can be slow and insecure, so maybe it's
> better to avoid and replace it. More info on: 
> www.nczonline.net/blog/2013/06/25/eval-isnt-evil-just-misunderstood
>
>  Now I need to add 'unsafe-eval' to my Content-Security-Policy to
> make it work
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.22 (Darwin)
Comment: GPGTools - http://gpgtools.org

iQEcBAEBAgAGBQJUlyxLAAoJEIskG/rSlyw4Jr0IAKBLvwsxAuOxTonPlZlGfff5
jjqJH3x9lwleaXzATAgiMCwgKu9llotigxxO4TdiwyAuzAvKYhzriOdO0WSvvaBq
OiC/pP4gR14BCFPHGuwpE02hR7sq9oZOYq7QWsq4+zDPLMJkoO3CHXemF2/u3Wyj
bdVag1/G/TaNhGE40RuDg37+gaeCHLodUfKpu/P+73Unr0ujztlUx4HI5wbj4b9J
p+srPfBldxZmmt71YdDssXOGdklca9BArRjHJfl46+KOkVSgpuYqNZpGH/0PF3r4
nIADyTkqSeF6mRGTvk2DJp6/YFJZulaEAfLuV1qi8bwxIPnMd1fEvYzMG+S4hWw=
=f57W
-----END PGP SIGNATURE-----