Adding `eval` support #3

guillaumebriday · 2020-11-17T09:01:35Z

No description provided.

glaszig · 2021-06-12T01:24:09Z

quickly took a stab at this. what happens is that rails-ujs already detects that the response is js and does the following:

// const responseText = 'alert("hello world!")'
const script = document.createElement("script")
script.setAttribute("nonce", cspNonce())
script.text = responseText

document.head
  .appendChild(script)
  .parentNode.removeChild(script)

stimulus-remote-rails then goes on and inserts what's in responseText as html.

what do you intend to do here?

guillaumebriday · 2021-06-12T21:10:32Z

Hum, I need to check how it behaves, maybe there is nothing to do.

guillaumebriday added the help wanted Extra attention is needed label Nov 17, 2020

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Adding `eval` support #3

Adding `eval` support #3

guillaumebriday commented Nov 17, 2020

glaszig commented Jun 12, 2021 •

edited

Loading

guillaumebriday commented Jun 12, 2021

Adding eval support #3

Adding eval support #3

Comments

guillaumebriday commented Nov 17, 2020

glaszig commented Jun 12, 2021 • edited Loading

guillaumebriday commented Jun 12, 2021

Adding `eval` support #3

Adding `eval` support #3

glaszig commented Jun 12, 2021 •

edited

Loading