mirrors/styleguide
0
0 Fork 0
mirror of https://github.com/google/styleguide.git synced 2026-10-28 08:25:21 +08:00
Code Activity

js: link to a definition of CSP

Browse Source 
"CSP environments" is not explained.  Spell out Content Security Policy
and link to a description of it.
This commit is contained in:
Lubaba Khalid authored and Mike Frysinger committed 2026-10-27 10:47:51 -04:00
1 parent cbce6a3f22
commit dde305184e
1 file changed
+3 -2
Download Patch File Download Diff File Expand all files Collapse all files
jsguide.md
+3 -2
View File
@@ -2839,8 +2839,9 @@ been banned in strict mode since ES5.
#### 5.11.2 Dynamic code evaluation
Do not use `eval` or the `Function(...string)` constructor (except for code
loaders). These features are potentially dangerous and simply do not work in CSP
environments.
loaders). These features are potentially dangerous and simply do not work in
environments with a
[Content Security Policy (CSP)](https://developer.mozilla.org/en-US/docs/Web/HTTP/Guides/CSP).
<a id="disallowed-features-automatic-semicolon-insertion"></a>