{"action":"created","issue":{"url":"https://api.github.com/repos/webpack/script-loader/issues/6","labels_url":"https://api.github.com/repos/webpack/script-loader/issues/6/labels{/name}","comments_url":"https://api.github.com/repos/webpack/script-loader/issues/6/comments","events_url":"https://api.github.com/repos/webpack/script-loader/issues/6/events","html_url":"https://github.com/webpack/script-loader/issues/6","id":56242610,"number":6,"title":"Evaluating works inconsistently among browsers","user":{"login":"valscion","id":482561,"avatar_url":"https://avatars.githubusercontent.com/u/482561?v=3","gravatar_id":"","url":"https://api.github.com/users/valscion","html_url":"https://github.com/valscion","followers_url":"https://api.github.com/users/valscion/followers","following_url":"https://api.github.com/users/valscion/following{/other_user}","gists_url":"https://api.github.com/users/valscion/gists{/gist_id}","starred_url":"https://api.github.com/users/valscion/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/valscion/subscriptions","organizations_url":"https://api.github.com/users/valscion/orgs","repos_url":"https://api.github.com/users/valscion/repos","events_url":"https://api.github.com/users/valscion/events{/privacy}","received_events_url":"https://api.github.com/users/valscion/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":4,"created_at":"2015-02-02T14:26:02Z","updated_at":"2015-10-23T16:30:31Z","closed_at":null,"body":"Please see the following blog post for explanation on why it is not possible to just run `eval.call(null, src)` and expect it to behave the same way in most of the browsers.\r\n\r\nhttp://perfectionkills.com/global-eval-what-are-the-options/\r\n\r\nIt should be noted that even if the script written in that blog post is used, one should never rely 100% for this loader as it still might fail. Some kind of warning for unsupporting browsers could be given or maybe a plain-old script insertion should be done (if possible) for browsers which don't support indirect eval functionality nor `execScript`."},"comment":{"url":"https://api.github.com/repos/webpack/script-loader/issues/comments/150626272","html_url":"https://github.com/webpack/script-loader/issues/6#issuecomment-150626272","issue_url":"https://api.github.com/repos/webpack/script-loader/issues/6","id":150626272,"user":{"login":"zdexter","id":588935,"avatar_url":"https://avatars.githubusercontent.com/u/588935?v=3","gravatar_id":"","url":"https://api.github.com/users/zdexter","html_url":"https://github.com/zdexter","followers_url":"https://api.github.com/users/zdexter/followers","following_url":"https://api.github.com/users/zdexter/following{/other_user}","gists_url":"https://api.github.com/users/zdexter/gists{/gist_id}","starred_url":"https://api.github.com/users/zdexter/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/zdexter/subscriptions","organizations_url":"https://api.github.com/users/zdexter/orgs","repos_url":"https://api.github.com/users/zdexter/repos","events_url":"https://api.github.com/users/zdexter/events{/privacy}","received_events_url":"https://api.github.com/users/zdexter/received_events","type":"User","site_admin":false},"created_at":"2015-10-23T16:30:31Z","updated_at":"2015-10-23T16:30:31Z","body":"+1, @dmose makes a good point about `Content-Security-Policy` settings. Latest Chrome will tell you:\r\n\r\n`Uncaught EvalError: Refused to evaluate a string as JavaScript because 'unsafe-eval' is not an allowed source of script in the following Content Security Policy directive: \"`"}}