[TYPO3-dev] Content-Security-Policy eval()

Jost Baron Jost.Baron at gmx.de
Mon Dec 22 21:49:52 CET 2014


Hi Job,

ext-all is a third-party library, ExtJS from Sencha. So the eval()
statements cannot be easily removed from it.

But I think that someone at some time mentioned that Typo3 should get
rid of ExtJS, but I don't know any details about that.

Regards,
Jost

On 22.12.2014 18:08, Job Rutgers wrote:
> eval() is used a lot when I use firebug and search trough the scrips (of
> the latest master) for example in the ext-all file:
> 
> function evalFunc_pol(foreign, value) {
>     return eval (((foreign=="-")?'-':'')+value);
> }
> I'm not a Javascript expert so I have no suggestion how to replace it nice.




More information about the TYPO3-dev mailing list