#5090 - $cms.behaviors.clickEval fails because of CSP unsafe-eval (breaks the + and - buttons on privileges)

  • By
  • Added
  • 0 views
Identifier #5090
Issue type Minor issue (breaks specific functionality)
Title $cms.behaviors.clickEval fails because of CSP unsafe-eval (breaks the + and - buttons on privileges)
Status Completed
Handling member Chris Graham
Addon General / Uncategorised
Description $cms.behaviors.clickEval uses an eval within the function, but this is blocked by Content Security Policy via unsafe-eval. As a result, the +/- buttons on privilege screens do not work. This might also be breaking the repeat for other group buttons, but I am not sure yet.
Steps to reproduce

Funded? No
The system will post a comment when this issue is modified (e.g., status changes). To be notified of this, click "Enable comment notifications".

Rating

Unrated