Opened 3 years ago

Closed 3 years ago

Last modified 3 years ago

#18910 closed defect (fixed)

dojo/i18n's evalBundle causing CSP 'unsafe-eval' errors even when unused

Reported by: Neil Roberts Owned by: Michael Van Sickle <mvansickle@…>
Priority: undecided Milestone: 1.8.13
Component: Internationalization Version: 1.11.2
Keywords: Cc:
Blocked By: Blocking:

Description

evalBundle in dojo/i18n may be declared as-needed within syncRequire. This prevents unsafe-eval errors when i18n is used with async: true and has("csp-restrictions").

Change History (9)

comment:1 Changed 3 years ago by Neil Roberts

comment:2 Changed 3 years ago by bill

I'm just confused how this helps. evalBundle is only declared as-needed, but isn't it still needed by dijit? Or at least, it seems like dijit is still calling getLocalization() to do a sync XHR to get the messages?

comment:3 Changed 3 years ago by Dasa Paddock

Should #18908 be reopened?

comment:4 Changed 3 years ago by Michael Van Sickle <mvansickle@…>

Owner: set to Michael Van Sickle <mvansickle@…>
Resolution: fixed
Status: newclosed

In 1ace407/dojo:

Error: Processor CommitTicketReference failed
Unsupported version control system "git": Can't find an appropriate component, maybe the corresponding plugin was not enabled? 

comment:5 Changed 3 years ago by Michael Van Sickle <mvansickle@…>

In 923d317/dojo:

Error: Processor CommitTicketReference failed
Unsupported version control system "git": Can't find an appropriate component, maybe the corresponding plugin was not enabled? 

comment:6 Changed 3 years ago by Michael Van Sickle <mvansickle@…>

In b740352/dojo:

Error: Processor CommitTicketReference failed
Unsupported version control system "git": Can't find an appropriate component, maybe the corresponding plugin was not enabled? 

comment:7 Changed 3 years ago by Michael Van Sickle <mvansickle@…>

In 1b5cb66/dojo:

Error: Processor CommitTicketReference failed
Unsupported version control system "git": Can't find an appropriate component, maybe the corresponding plugin was not enabled? 

comment:8 Changed 3 years ago by Michael Van Sickle <mvansickle@…>

In ae9bb69/dojo:

Error: Processor CommitTicketReference failed
Unsupported version control system "git": Can't find an appropriate component, maybe the corresponding plugin was not enabled? 

comment:9 Changed 3 years ago by Michael J Van Sickle

Milestone: tbd1.8.13
Note: See TracTickets for help on using tickets.