ScientiaMobile

Hello,

When trying to add your javascript file to a website that is running Content Security Policy (CSP) Level 2. We get the following error:

Refused to evaluate a string as JavaScript because 'unsafe-eval' is not an allowed source of script in the following Content Security Policy directive: "script-src........."

Poorly coded Javascript still uses eval as its a security risk. Any chance to update your JS script. Or are we allowed to recode it ourselves...?

I am sure the world would love to use a safer script as well.

Hi John,

Thank you for letting us know. I have notified my engineering team regarding this case and will follow up with you when I receive an update.

In the meantime, please feel free to let me know if you have any other questions or concerns.

Thanks,

Aaron

Please post update here, as we love using WURFL.js but the code definitely needs updating.