- Issue created by @daften
- Status changed to Needs review
over 1 year ago 11:13pm 14 May 2023
Now the javascript contains a string that needs to be executed, changing this to be just a method reference, makes it a bit more secure. With the string, you need unsafe-eval in your CSP configuration for script-src. With this change, you don't need that anymore.
Needs review
1.4
Code