Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Disable webpacks eval code #34

Merged
merged 1 commit into from
Jun 5, 2018
Merged

Disable webpacks eval code #34

merged 1 commit into from
Jun 5, 2018

Conversation

HaNdTriX
Copy link
Contributor

@HaNdTriX HaNdTriX commented Jun 4, 2018

Using eval in chrome extensions is not recommended, since it opens the door for many security issues.

Webpack uses eval, in order to provide a global object. This feature is build in a way, that uses eval under the hood. (Souce)

Since webextensions always run in a web context, we don't need this functionality.
Instead we can link global with window. This is why this PR doesn't introduce a breaking change.

@HaNdTriX HaNdTriX merged commit 11e794b into master Jun 5, 2018
@HaNdTriX HaNdTriX deleted the eval branch June 5, 2018 11:35
HaNdTriX added a commit that referenced this pull request Jun 25, 2018
Firefox webstore csp policy prohibits the use of eval or func consturctor.

RELATED ISSUE: #34
HaNdTriX added a commit that referenced this pull request Jun 25, 2018
Firefox webstore csp policy prohibits the use of eval or func consturctor.

RELATED ISSUE: #34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant