GitHub user PARKER-X added a comment to the discussion: Unsafe eval error
if IS_PRODUCTION:
TALISMAN_ENABLED = True
TALISMAN_CONFIG = {
"strict_transport_security": True,
"strict_transport_security_max_age": 31536000,
"frame_options": None,
"content_security_policy": {
"default-src": ["'self'", "'unsafe-inline'", "'unsafe-eval'"],
"script-src": [
"'self'",
"'strict-dynamic'",
"'unsafe-eval'", # <-- Add this line
# Keep any existing configurations like your nonces below
],
},
"content_security_policy_nonce_in": ["script-src"],
"force_https": False,
}
else:
# Disable Talisman for local dev (it blocks iframes without CSP tuning)
TALISMAN_ENABLED = False
CONTENT_SECURITY_POLICY_WARNING = False
My code
GitHub link:
https://github.com/apache/superset/discussions/42423#discussioncomment-17777531
----
This is an automatically sent email for [email protected].
To unsubscribe, please send an email to:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
