Merge pull request #16616 from nextcloud/dep/setEvalScript

setting unsafe-eval is deprecated
2019-07-31 11:01:38 +07:00 · 2019-07-31 11:01:38 +07:00 · 1d8b09aa86
parent 3f8f0f7609 417fbb5d60
commit 1d8b09aa86
1 changed files with 2 additions and 0 deletions
--- a/lib/private/Security/CSP/ContentSecurityPolicy.php
+++ b/lib/private/Security/CSP/ContentSecurityPolicy.php
@ -54,6 +54,8 @@ class ContentSecurityPolicy extends \OCP\AppFramework\Http\ContentSecurityPolicy

 	/**
 	 * @param boolean $evalScriptAllowed
+	 *
+	 * @deprecated 17.0.0 Unsafe eval should not be used anymore.
 	 */
 	public function setEvalScriptAllowed(bool $evalScriptAllowed) {
 		$this->evalScriptAllowed = $evalScriptAllowed;