1. Feedback
  2. React
  3. 43895

Welcome to the React feedback portal. We’re happy you’re here! If you have feedback on how to improve the React, we’d love to hear it!

  • Check out the features or bugs others have reported and vote on your favorites. Feedback will be prioritized based on popularity.
  • If you have feedback that’s not listed yet, submit your own.

Thanks for joining our community and helping improve Syncfusion products!

1
Vote

Security conserns due to Content Security Policy

Hi,

I have been trying to use Gannt chart and then I realized it is using eval / Function constructor which is a security concern.

The projects where I tried to use it is using strict CSP policy and I cannot allow unsafe eval or "data:" urls for fonts.

 Both are used in Gannt chart and for that fact, looks like most of the other components as well.  

More over recent version of manifest does not allow using unsafe eval and so syncfusion components cannot be used for browser extension developments which is my primary usecase.

Is there any plans to remove those usages in near future? If not I won't be able to use it and I may have to search for other alternate options only.