1.2.0-rc3 ng-cp does not seem to work #4462

tanx · 2013-10-16T15:41:32Z

Worked fine in rc2. But now my chrome packaged app's default csp config blocks all sorts of things.

randallb · 2013-10-16T17:04:54Z

can you define all sorts of things? Would help the bug be more useful to others.

tanx · 2013-10-16T18:49:08Z

For example eval(). Afaik ng-csp mode prevents angular from using eval for ng-* inline handlers. So it looks like csp mode isn't active.

wesleycho · 2013-10-17T02:24:58Z

I believe this is related to #4394

madaz · 2013-10-17T04:33:21Z

Also fails while trying to bootstrap the app If you have a template that is included within the main html as a script tag in which the template has some angular bindings {{}}. This has worked up until RC3

Error

EvalError: Refused to evaluate a string as JavaScript because 'unsafe-eval' is not an allowed source of script in the following Content Security Policy directive: "script-src 'self' code.angularjs.org".

    at Function (<anonymous>)
    at getterFn (http://code.angularjs.org/1.2.0-rc.3/angular.js:9323:26)
    at Lexer.readIdent (http://code.angularjs.org/1.2.0-rc.3/angular.js:8607:20)
    at Lexer.lex (http://code.angularjs.org/1.2.0-rc.3/angular.js:8436:14)
    at Parser.parse (http://code.angularjs.org/1.2.0-rc.3/angular.js:8700:30)
    at $get (http://code.angularjs.org/1.2.0-rc.3/angular.js:9498:37)
    at $interpolate (http://code.angularjs.org/1.2.0-rc.3/angular.js:7271:27)
    at addTextInterpolateDirective (http://code.angularjs.org/1.2.0-rc.3/angular.js:5630:27)
    at collectDirectives (http://code.angularjs.org/1.2.0-rc.3/angular.js:4991:11)
    at compileNodes (http://code.angularjs.org/1.2.0-rc.3/angular.js:4856:22)

Http Response Header

Content-Security-Policy: script-src 'self' code.angularjs.org;

App declaration

<html lang="en" ng-app="app" ng-csp>

Template inside body of html

    <script type="text/ng-template" id="home.tpl">
        <h2>Home Template</h2>
        <p>{{ctrl.message}}</p>
    </script>

tanx · 2013-10-17T06:36:18Z

I also bootstrap manually, since I use require.js.

Templates are loaded using ng-include.

vkadam · 2013-10-20T02:24:27Z

I am having the same error, with chrome extension + angular.js + requirejs + manual bootstrap

agostbiro · 2013-10-28T07:59:49Z

If the problem still persists, this might be of interest to you:
https://groups.google.com/forum/#!topic/angular/w00KgEi1DLk

IgorMinar · 2014-01-03T02:58:37Z

I believe that this was fixed already some time before 1.2.0 final. Please open a new issue if you still have problems.

IgorMinar closed this as completed Jan 3, 2014

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

1.2.0-rc3 ng-cp does not seem to work #4462

1.2.0-rc3 ng-cp does not seem to work #4462

tanx commented Oct 16, 2013

randallb commented Oct 16, 2013

tanx commented Oct 16, 2013

wesleycho commented Oct 17, 2013

madaz commented Oct 17, 2013

tanx commented Oct 17, 2013

vkadam commented Oct 20, 2013

agostbiro commented Oct 28, 2013

IgorMinar commented Jan 3, 2014

1.2.0-rc3 ng-cp does not seem to work #4462

1.2.0-rc3 ng-cp does not seem to work #4462

Comments

tanx commented Oct 16, 2013

randallb commented Oct 16, 2013

tanx commented Oct 16, 2013

wesleycho commented Oct 17, 2013

madaz commented Oct 17, 2013

tanx commented Oct 17, 2013

vkadam commented Oct 20, 2013

agostbiro commented Oct 28, 2013

IgorMinar commented Jan 3, 2014