Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[BUG]: Unable to use the checker in with branch https://github.com/IBMa/equal-access/pull/1594 #1684

Closed
ErickRenteria opened this issue Sep 14, 2023 · 6 comments
Assignees

Comments

@ErickRenteria
Copy link
Contributor

ErickRenteria commented Sep 14, 2023

Project

extension-checker

Browser

Chrome

Operating system

Windows

Description

The checker seem to have a hard crash as soon as we loaded. This is with branch #1594 and using local build. This is happening under the windows env. This is not the same behavior with the branch artifact action but unable to test the previews rules sets.
Please review attachment
Screenshot (3)
hment:

Steps to reproduce

Build branch in Windows,
Load checker in chrome
Review the chrome://extension for error logs
User is unable to see the checker from dev tools

@shunguoy
Copy link
Contributor

The error message indicates that the CSP does not allow the use of the eval() method/function in the extension code because 'unsafe-eval' is not allowed in the manifest.json (should be for security reasons). Therefore, one possible fix is to remove the use of eval() in the extension code.

@shunguoy
Copy link
Contributor

@ErickRenteria are you able to build (1) on Mac; and (2) master branch in Windows? please let me know.

@shunguoy
Copy link
Contributor

@ErickRenteria can you post the entire error message?

@ErickRenteria
Copy link
Contributor Author

This issue is also in master:

}, "devtools_page": "devtools.html", "background": { "service_worker": "background.js"

Uncaught EvalError: Refused to evaluate a string as JavaScript because 'unsafe-eval' is not an allowed source of script in the following Content Security Policy directive: "script-src 'self' 'wasm-unsafe-eval' 'inline-speculation-rules' http://localhost:* http://127.0.0.1:*".

Uncaught EvalError: Refused to evaluate a string as JavaScript because 'unsafe-eval' is not an allowed source of script in the following Content Security Policy directive: "script-src 'self' 'wasm-unsafe-eval' 'inline-speculation-rules' http://localhost:* http://127.0.0.1:*".

Screenshot 2023-09-14 131140

@ErickRenteria
Copy link
Contributor Author

Additional logs, stack trace too larger to add in git.
Screenshot 2023-09-14 131847
Screenshot 2023-09-14 131903

@ErickRenteria
Copy link
Contributor Author

This might be related to my local env. The actions are working in the Windows env and we're conduction validation. Closing issue.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants