We've discovered an issue with our Content Security Policy header, in combination with Embedded Content 2.0.2. We don't allow unsafe-eval in the script-src category of the CSP configuration, but the build file embeddedContent.js contains several eval functions.
The eval functions are removed in commit f445d869. So installing the 2.0.x version of this module solves the problem. Is it possible to release this fix as soon as possible?
Active
2.0
Code