Uncaught EvalError: Refused to evaluate a string as JavaScript because 'unsafe-eval' is not an allowed source of script in the following Content Security Policy directive

[sapkra]

I got an error in this line:
https://github.com/Download/anylogger/blob/master/anylogger.js#L72

[Download]

Can you tell me about the context in which the error occurred? How could I try to reproduce this?

[Download]

So for some background info:

Anylogger's loggers are functions that have a name. The name is the logger name:

var anylogger = require('anylogger')
var log = anylogger('my:test')
typeof log == 'function' // true
log.name == 'my:test' // true

Creating a function with an arbitrary name from code is possible in 2 ways AFAIK:

• With eval() or new Function() (widely supported, but unsafe)
• Letting the interpreter implicitly assign the name using {[name]: function(){}} (only modern interpreters)

The second method does not use eval, but it's using modern language features that don't work on old browsers. So until now, anylogger has been using the first method. However it seems that this is a problem in some contexts where unsafe_eval is not allowed. I would like anylogger to work in all contexts so I prepared a new release in which I'm changing this to first try the eval method but within try..catch, then try the implicit assignment method which does not work on older browsers... hopefully we can cover most cases here because older browsers ususally also don't enforce CSP policy.

Can you try out anylogger 1.0.6 for me and let me know if it helps?

[sapkra]

The context is a mattermost plugin. The mattermist server sets http headers to restrict script sources to improve the security. The list of the allowed sources you can find in the error message.

Thank you for the fast response, i will try out your change.

[sapkra]

It seems to work fine now but I don't know if these errors are happening on localhost. I will close it for now and if I get this error again I will reopen the issue.

[Download]

@sapkra Thank you for your feedback 👍