Skip to main content

UNSAFE_EVAL

Constant UNSAFE_EVAL 

Source
pub const UNSAFE_EVAL: &str = "'unsafe-eval'";
Expand description

'unsafe-eval': allows eval and new Function (htmx’s hx-on and js: need it). Avoid it.

§Examples

assert_eq!(ocre::security::UNSAFE_EVAL, "'unsafe-eval'");