Comments (9)
Ill add try catch for users who has CSP it will fall back to possibly dangerous global access
from universe.
Sorry, not sure I understand what that means?... I was hoping there would be a way to use a webpack nonce as this is becoming the recommended way for CSPs!
from universe.
I can fix unsafe-eval issues.
Is there something else you want as well?
If this is about nonce you can try using the createScript hook via runtime plugin
from universe.
where is the unsafe eval getting triggered?
from universe.
I just tried setting this in the meta
<meta http-equiv="Content-Security-Policy" content="script-src 'self' http://localhost:3008 http://localhost:3009 http://localhost:3010 http://localhost:3011 http://localhost:3012;">
and no eval error was triggered, please provide a repo where its failing and i can take a look
from universe.
Hi,
It is when the lazy load actually loads. Each of our remotes exposes its own routes which are pieced together in the host. When the host tries to load a module then the issue occurs
In this example a collection of routes are loaded into the host, similar to below. When the host tries to route to the module then the error occurs. No eval error is triggered until you actually try to invoke the module
I'll add a repo, shortly
from universe.
@ScriptedAlchemy you can see this issue here https://github.com/72gm/gm-mfe-csp
bootstrap file in the Host generates the csp policy.. which needs unsafe-eval added to make it work
(isn't a monorepo so need open top level folder in vs code and run each via it's own terminal)
from universe.
This is not federation v2 its just normal webpack, there is no unsafe eval here.
Webpack in development mode wraps modules in eval, dont use CSP on development machines or change your devtool config.
from universe.
Apologies, just moved to webpack. Easy when you know how!
@ScriptedAlchemy much appreciate your help on this, saved me a load of grief
For anyone having this issue there are some pointers here webpack/webpack#5627 on what you might need to do
from universe.
Related Issues (20)
- dts for entries exposed with aliases are not emitting HOT 1
- Can't create Error Fallback when any Remote fails. HOT 7
- Chrome Extension is not working due to empty `moduleInfo` HOT 3
- web worker error in host HOT 2
- Exact matching alias does not work as expected in bridge webpack plugin HOT 2
- Shared dependency version cannot be resolved if installed at root of a monorepo
- Spaces in path to project with @module-federation/next-mf result in `Unterminated string in JSON at position` and HookWebpackError errors HOT 8
- how can I use in vue3 ts template HOT 5
- Cannot use vue2.7 lifecycle hook through module federation
- [CORS]: @module-federation/nextjs-mf HOT 3
- Cannot use shared module in .mjs file correctly HOT 4
- Adding element to page with id that matches remote's name causes `TypeError: remoteEntryExports.init is not a function` HOT 2
- External modules not shared HOT 4
- [MF Plugin] "promise new Promise" syntax doesn't work with @ char in it HOT 4
- Entry runtime miss function "O" HOT 5
- esbuild plugin error: Top-level await is not available in the configured target environment HOT 1
- @module-federation/nextjs-mf version 8.4.0 breaks API routes
- Having production error - TypeError: (void 0) is not a function at .next/server/webpack-api-runtime.js:1:199
- Nextjs plugin doesn't work unless the "unsafe-eval" CSP header is set
- Vue Bridge package lacks `dist` HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from universe.