math.js 1.7.0 fails with Error: call to Function() blocked by CSP in line 14065 when a CSP is applied:
var factory = new Function ('defs', factoryCode);This may not be the only code that fails under a CSP. Adding the 'unsafe-eval' CSP attribute doesn't prevent this (in Firefox).
It should be possible to use math.js in a CSP-secured environment.
math.js 1.7.0 fails with Error: call to Function() blocked by CSP in line 14065 when a CSP is applied:
This may not be the only code that fails under a CSP.
Adding the 'unsafe-eval' CSP attribute doesn't prevent this (in Firefox).It should be possible to use math.js in a CSP-secured environment.