Actions
Task #63712
closed
Avoid use of eval() and replace it
Start date:
2015-09-30
Due date:
% Done:
100%
Estimated time:
(Total: 0.00 h)
TYPO3 Version:
7
PHP Version:
Tags:
Complexity:
Sprint Focus:
Description
The use of the eval() can be slow and insecure, so maybe it's better to avoid and replace it.
More info on:
http://www.nczonline.net/blog/2013/06/25/eval-isnt-evil-just-misunderstood/
After it is implemented it should be possible to use (in nginx):
add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; frame-ancestors 'self'";
Now 'unsafe-eval' still needed in default-src
Updated by 
Updated by 
Updated by 
Updated by 
Updated by 
Updated by
Actions