Hi Folks,
I have encountered some issue when I have implemented the CSP. Please see below screen cap.
My initial solution was to enable 'unsave-eval' [1] however this solution was rejected by our security team.
[1] Adobe DTM Content Security Policy Block
My alternative solution is to avoid using the "new Function" and rather use the actual code and register it as regular JS function.
I have tested the plugin and it is working as expected.
My question would be:
- Will there be any issue on my alternative solution?
- Whats the advantage of using the "new Function" approach compare to my alternative solution?
Many thanks in advance.