javascript - Content Security Policy (CSP) block eval method call -

i using niceditor , in method call eval blocked csp when comment csp code it's working fine.

error: call eval() blocked csp     nicedit.js:779:36

my csp code

scriptsrc: ["'self'", "'unsafe-inline'"]

thanks in advance

if need use niceditor contains eval (which not idea in first place), can add following directive: 'unsafe-eval'

i really, really, recommend use different editor doesn't rely on eval though. security risk in cases.

if need alternative, have @ prosemirror example.

M16