mikecousins/react-pdf-js

CSP Issue with evaled code in pdfjs-dist

Closed this issue · 2 comments

betterphp commented

The build/pdf.worker.js file from pdfjs-dist contains this chunk

image

which is triggering an unsafe eval CSP error on our site.

This has been fixed in pdfjs-dist version 2.2.228 but react-pdf-js depends on an older version.

mikecousins commented

We’re on 2.2.228 now so it should be fixed.

betterphp commented

Ace, thanks :)

  • 👍1