Hide 'unsafe-eval' from style-src config

Created on 13 June 2024, 13 days ago

Updated 14 June 2024, 13 days ago

The CSP spec only defines 'unsafe-eval' as valid in parsing whether a script should be executed.

Remove 'unsafe-eval' from the options available for style-src on the config form.

📌 Task

Status

Fixed

Version

2.0

Component

Code

Created by

🇨🇦Canada gapple

Live updates comments and jobs are added and updated live.

Comments & Activities

gapple → committed f41576d8 on 2.x

Issue #3454524: Hide 'unsafe-eval' from style-src config options

Production build 0.69.0 2024