Support VegaLite4 (needs to circumvent CSP)

[rpalloni]

Prerequisites

I've searched a lot and checked and asked many times, see:
vega/altair#765
#1771

Description

I'm in hydrogen 2.14 / atom 1.44 / Ubuntu 18.04 / python 3.7 / altair 4 and I cannot plot images with this code:

import altair as alt
from vega_datasets import data
cars = data.cars()

fig = alt.Chart(cars).mark_point().encode(
x='Horsepower',
y='Miles_per_Gallon',
color='Origin',
).interactive()

fig

-- fig.to_dict() data are in!

I only get an empty square with no image.
In Jupyter it is working properly.

What should I do? Which versions combo does work?
Thanks

[aviatesk]

Try apm dev Hydrogen and restart Atom, and report back to us whether it works.

[rpalloni]

Apparently nothing changed and I still have Hydrogen 2.14.0 in packages. Should I uninstall this version?

[aviatesk]

yes uninstall it and then install Hydrogen on master branch.

[rpalloni]

Uninstalled Hydrogen 2.14.0
apm dev Hydrogen
atom -d
Still same result with empty plot

[aviatesk]

okay, I think I have a fix but can't push it right now because I'm on vacation.
Will ping you again when I get connection 😊

[aviatesk]

@rpalloni can you try with the current master and report back to me ?

[rpalloni]

May I ask you to tell me the exact commands to remove the previous dev master. I'm not fully convinced I'm doing it right..I still see the friday version.

[aviatesk]

If you're with default Atom configuration:

> apm uninstall -d Hydrogen
> cd ~/github
> rm -rf Hydrogen
> apm dev Hydrogen
> atom -d

or you can manually clone this repository and install from it:

> git clone https://github.com/nteract/hydrogen/
> cd Hydrogen
> apm install
> apm link --dev

[rpalloni]

I still get the empty plot and this is the error in the dev tools

Refused to execute inline hydrogen/node_modules/@nteract/outputs/lib/components/media/html.js:46
script because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-eval'".

[aviatesk]

ah, CSP error again ... I guess there's a way to circumvent this, but I don't have a time to find this right now.
If anybody interested in this, I would really appreciate if you search another issues/PRs that tried to handle a CSP error (some were resolved and the others still remain) and report back to us or even fix it.