关闭 body 前添加 Javascript 的任何批准方法？

[pmusaraj (Penar Musaraj)]

@Jim_Starkweather

Uncaught EvalError: Refused to evaluate a string as JavaScript because ‘unsafe-eval’ is not an allowed source of script in the following Content Security Policy directive: "script-src…

You can whitelist evals in the content security policy site setting, see Mitigate XSS Attacks with Content Security Policy.

We do not recommend this though, it opens your site to security exploits.