{"action":"created","issue":{"url":"https://api.github.com/repos/cure53/DOMPurify/issues/107","labels_url":"https://api.github.com/repos/cure53/DOMPurify/issues/107/labels{/name}","comments_url":"https://api.github.com/repos/cure53/DOMPurify/issues/107/comments","events_url":"https://api.github.com/repos/cure53/DOMPurify/issues/107/events","html_url":"https://github.com/cure53/DOMPurify/issues/107","id":108563593,"number":107,"title":"Chrome complains about an unsafe-eval","user":{"login":"oparoz","id":323220,"avatar_url":"https://avatars.githubusercontent.com/u/323220?v=3","gravatar_id":"","url":"https://api.github.com/users/oparoz","html_url":"https://github.com/oparoz","followers_url":"https://api.github.com/users/oparoz/followers","following_url":"https://api.github.com/users/oparoz/following{/other_user}","gists_url":"https://api.github.com/users/oparoz/gists{/gist_id}","starred_url":"https://api.github.com/users/oparoz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/oparoz/subscriptions","organizations_url":"https://api.github.com/users/oparoz/orgs","repos_url":"https://api.github.com/users/oparoz/repos","events_url":"https://api.github.com/users/oparoz/events{/privacy}","received_events_url":"https://api.github.com/users/oparoz/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":3,"created_at":"2015-09-27T22:04:50Z","updated_at":"2015-09-28T18:26:43Z","closed_at":null,"body":"> Refused to execute inline event handler because it violates the following Content Security Policy directive: \"script-src 'self' 'unsafe-eval'\". Either the 'unsafe-inline' keyword, a hash ('sha256-...'), or a nonce ('nonce-...') is required to enable inline execution.\r\n\r\npurify.js:309 ` doc = new DOMParser().parseFromString(dirty, \"text/html\");`\r\n\r\nparseFromString is underlined. \r\n\r\nBug in Chrome?"},"comment":{"url":"https://api.github.com/repos/cure53/DOMPurify/issues/comments/143834847","html_url":"https://github.com/cure53/DOMPurify/issues/107#issuecomment-143834847","issue_url":"https://api.github.com/repos/cure53/DOMPurify/issues/107","id":143834847,"user":{"login":"oparoz","id":323220,"avatar_url":"https://avatars.githubusercontent.com/u/323220?v=3","gravatar_id":"","url":"https://api.github.com/users/oparoz","html_url":"https://github.com/oparoz","followers_url":"https://api.github.com/users/oparoz/followers","following_url":"https://api.github.com/users/oparoz/following{/other_user}","gists_url":"https://api.github.com/users/oparoz/gists{/gist_id}","starred_url":"https://api.github.com/users/oparoz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/oparoz/subscriptions","organizations_url":"https://api.github.com/users/oparoz/orgs","repos_url":"https://api.github.com/users/oparoz/repos","events_url":"https://api.github.com/users/oparoz/events{/privacy}","received_events_url":"https://api.github.com/users/oparoz/received_events","type":"User","site_admin":false},"created_at":"2015-09-28T18:26:43Z","updated_at":"2015-09-28T18:26:43Z","body":"I will try to reproduce. That was happening while I was trying to parse the dirty SVG from http://svg.enshrined.co.uk/ which I was retrieving via an XMLHttpRequest.\r\nI can never show the result in an IMG tag, but that's for another issue.\r\n\r\nChromium 44.0.2403.125"}}