Javascript Load error 'Unsafe-Eval'

Question

Javascript Load error 'Unsafe-Eval'

Sagar Pithadiya 6

Hi team,
Please help me to figure out my issue. as i am getting some unusual error while trying to load java script lib in my web page.

Error :- Refused To Evaluate A String As Javascript Because 'Unsafe-Eval' Is Not An Allowed Source Of Script In The Following Content Security Policy Directive: "Script-Src 'Self'"

Please revert.

Thanks,
Sagar

Dillon Silzer 57,826 Reputation points Volunteer Moderator

2022-11-20T21:39:22.573+00:00

Please give us some more information. What code and browser are you experiencing this on? Javascript has to do with the front-end, not the backend and thus I am removing the IIS tag.
Sagar Pithadiya 6 Reputation points

2022-11-21T06:37:17.09+00:00

Hi DillonJS,
Thanks for reply, am using Chrome browser.
while i am trying to load script on my web pages getting below error
ERROR:-
Refused To Evaluate A String As Javascript Because 'Unsafe-Eval' Is Not An Allowed Source Of Script In The Following Content Security Policy Directive: "Script-Src 'Self'"

added snippet to master page:
<head>
<meta http-equiv=”Content-Security-Policy”
content=”default-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; ”>
</head>
TengFeiXie-MSFT 346 Reputation points

2022-11-21T09:49:09.48+00:00

Hi @Sagar Pithadiya

According to your description. I am not sure if you are doing development or testing related to browser extensions?

I tried the code you provided and did not get the same error reported. There is no related error message on devtools in browser either.

Could you provide the minimal reproducible code for the problem？

Your answer

Dillon Silzer 57,826 Reputation points Volunteer Moderator

2022-11-20T21:39:22.573+00:00

Please give us some more information. What code and browser are you experiencing this on? Javascript has to do with the front-end, not the backend and thus I am removing the IIS tag.
Sagar Pithadiya 6 Reputation points

2022-11-21T06:37:17.09+00:00

Hi DillonJS,
Thanks for reply, am using Chrome browser.
while i am trying to load script on my web pages getting below error
ERROR:-
Refused To Evaluate A String As Javascript Because 'Unsafe-Eval' Is Not An Allowed Source Of Script In The Following Content Security Policy Directive: "Script-Src 'Self'"

added snippet to master page:
<head>
<meta http-equiv=”Content-Security-Policy”
content=”default-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; ”>
</head>
TengFeiXie-MSFT 346 Reputation points

2022-11-21T09:49:09.48+00:00

Hi @Sagar Pithadiya

According to your description. I am not sure if you are doing development or testing related to browser extensions?

I tried the code you provided and did not get the same error reported. There is no related error message on devtools in browser either.

Could you provide the minimal reproducible code for the problem？

Share via

Javascript Load error 'Unsafe-Eval'

Your answer