Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Classy violates Contnent Security Policy #5

Closed
GodBleak opened this issue Oct 31, 2022 · 3 comments
Closed

Classy violates Contnent Security Policy #5

GodBleak opened this issue Oct 31, 2022 · 3 comments

Comments

@GodBleak
Copy link
Contributor

I'm unable to use classy while using the script-src directive in a Content Security Policy due to the use of the new Function() constructor. Is it possible to avoid using it?

@trusktr
Copy link
Member

trusktr commented Jan 2, 2023

I don't see the use of new Function anywhere. Is it perhaps your build tool adding that?

@trusktr
Copy link
Member

trusktr commented Jan 2, 2023

Almost ready to release classy-solid on stage 3 decorators. I've checked locally, and there are no uses of new Function.

The upcoming release will no longer support legacy decorators, only the new stage 3 decorators (#4), to keep things simple in the implementation. Then we'll also need to update Vite docs to use the latest Babel decorator config.

Closing since it won't be relevant, and maybe even the problem goes away whatever it was (I'm guessing build tool thing?).

@trusktr trusktr closed this as completed Jan 2, 2023
@GodBleak
Copy link
Contributor Author

GodBleak commented Jan 2, 2023

I think it's actually the dependency lowclass that's causing it, these lines particularly lowclass/Class.ts:81, lowclass/Class.ts:298, and lowclass/Class.ts:540

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants