google / google/site-kit-wp

Review `new Function()` and `eval()` usage

Open
#11,079 2 comments 1 reaction 1 assignee Claimed by @nfmohit View on GitHub
Type: Enhancement Type: Support
Dominant language
JavaScript
Stars
1.4k
Forks
383
Avg merge
4d 14h
Merged PRs (30d)
77

Description

## Bug Description

As highlighted by [a user in the support forums](https://wordpress.org/support/topic/plugin-fails-strict-csp-configurations/#post-18547519), review the plugin for any `new Function()` and `eval()` usage, so users can define more strict Content Security Policies.

The user who raised this highlighted the compiled vendor script in particular, `google-site-kit/dist/assets/js/googlesitekit-vendor-e44f66f****756bf1.js`.

From discussing this in an Engineering / Support sync, the issue may be from some of the plugin dependencies or how scripts are bundled.

---------------

_Do not alter or remove anything below. The following sections will be managed by moderators only._

## Acceptance criteria

*

## Implementation Brief

* [ ]

### Test Coverage

*

## QA Brief

*

## Changelog entry

*

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.