Firefox does not like the solution to CSP violations (using try…catch
+ eval
/Function
) existing in web3@1.0.0-beta.46
. This little repo shows a fix proposal, pretty much.
NOTE
: It seems to be a Firefox-specific issue.
You can diff web3.js
files:
diff broken/web3.js fixed/web3.js
Run it with npx static . -p 5000
and navigate to http://localhost:5000, open the console and click through the links. "Broken" page should display the following error message (twice):
Content Security Policy: The page’s settings blocked the loading of a resource at eval (“script-src”).
Screenshot: https://www.dropbox.com/s/m8z4mlc1yr7no6r/Screenshot%202019-02-22%2012.56.09.png?dl=0