Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Bug] unsafe eval #201

Closed
ChenYFan opened this issue Oct 28, 2021 · 2 comments
Closed

[Bug] unsafe eval #201

ChenYFan opened this issue Oct 28, 2021 · 2 comments
Labels
bug Something isn't working help wanted Extra attention is needed

Comments

@ChenYFan
Copy link

Description
When I used the "custom javascript",it doesn't work,and the dev console had throw out a err msg:

Failed to run custom JS:  EvalError: Refused to evaluate a string as JavaScript because 'unsafe-eval' is not an allowed source of script in the following Content Security Policy directive: "script-src 'self' https://api.bing.com https://www.google.com".

ver 5.3.3
chrome 94
lang zh-cn

I think that using eval was a bad idea.I prefered that establishing a new <script> label.

@ChenYFan ChenYFan added the bug Something isn't working label Oct 28, 2021
@davidcralph
Copy link
Member

Hello,

I apologise, but I am not sure of how to fix this. The old method of script label doesn't work for me and I cannot get the custom JS feature working with the Content Security Policy on the extension.

I'm going to disable the custom JS feature on the extension (so it is only available on the web version), and leave this issue open in case anyone wants to try and fix it. If you want to continue using the feature for now I advise you set your homepage to either demo.muetab.com or a built copy of Mue on your computer instead (all features available on the extension work on the web version as well).

@davidcralph davidcralph added the help wanted Extra attention is needed label Nov 7, 2021
@davidcralph davidcralph changed the title [Bug]unsafe eval [Bug] unsafe eval Nov 7, 2021
@Wessel
Copy link
Member

Wessel commented Feb 8, 2024

Closing this issue due to its age and inability to reproduce at current branch

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working help wanted Extra attention is needed
Projects
None yet
Development

No branches or pull requests

3 participants