Remove eval from runtime
Open
- Dominant language
- JavaScript
- Stars
- 69
- Forks
- 33
- PR merge metrics
- No merged PRs in 30d
Description
because CSP `unsafe-eval` is not so cool
@zxqfox @mishanga
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by locating the runtime code that uses eval and read how templates are currently executed. Determine the replacement scope and verify that runtime rendering still works without CSP unsafe-eval; the issue does not name specific files or tests.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript
- Domain
- tooling
- Issue type
- Refactor
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100