ES5 compatibility code causing issues with strict CSP

@billygerhard wrote:

There is a snippet of code in the ionic core that pulls in es5 code for backword compatibility with es5, but on servers running strict CSP, it throws the following error. I can’t figure out anyway to turn this feature off.

EvalError: Refused to evaluate a string as JavaScript because 'unsafe-eval' is not an allowed source of script in the following Content Security Policy directive: "script-src 'self'

                ! function r(n) {
                    return /\{\s*\[native code\]\s*\}/.test("" + n)
                }(n.customElements.define) ? (e = function(t) {
                    return n.HTMLElement.call(this, t)
                }).prototype = Object.create(n.HTMLElement.prototype, {
                    constructor: {
                        value: e,
                        configurable: !0
                    }
                }): e = new Function("w", "return class extends w.HTMLElement{}")(n), U[s].u(function i(n) {
                    var t = C(n),
                        e = t.s,
                        r = d(n[0]);
                    return t.s = function(n) {
                        var t = n.mode,
                            i = n.scoped;
                        return function o(n, t, e) {
                            return __webpack_require__("./node_modules/@ionic/core/dist/esm/es5/build lazy recursive ^\\.\\/.*\\.entry\\.js$ include: \\.entry\\.js$")("./" + n + (t ? ".sc" : "") + ".entry.js").then(function(n) {
                                return n[e]
                            })
                        }("string" == typeof e ? e : e[t], i, r)
                    }, t
                }(t), e)
            })

Posts: 1

Participants: 1

Read full topic