Use Content Security Policy (CSP) to secure the app
danieldietrich opened this issue · comments
Background: Candid internally uses eval
to execute web component scripts.
See also #10
See https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
Candid is a surprisingly fresh and frameworkless JavaScript library for building web applications.
danieldietrich opened this issue · comments
Background: Candid internally uses eval
to execute web component scripts.
See also #10
See https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP