Replies: 1 comment 5 replies
-
|
new Function eval setInterval setTimeout 都被禁用了 |
Beta Was this translation helpful? Give feedback.
-
|
|
Beta Was this translation helpful? Give feedback.
-
|
这个图是 'unsafe-inline' 通常浏览器会报错提示应该怎么做 |
Beta Was this translation helpful? Give feedback.
-
|
话说，为什么上面几个可以执行？ |
Beta Was this translation helpful? Give feedback.
-
|
使用了 'unsafe-hashes' https://github.com/volantis-x/community/blob/main/gulpfile.js#L64 可以写个自动程序都提取出来 document.querySelectorAll("[onclick]").forEach(e=>{console.log(e.getAttribute("onclick"))}) |
Beta Was this translation helpful? Give feedback.
-
|
学习了 |
Beta Was this translation helpful? Give feedback.
-
现行 csp 不允许 new Function/eval，有什么解决方案吗？@MHuiG
Beta Was this translation helpful? Give feedback.
All reactions