zhanxiong
06/05/2024, 7:04 AMFailed to load call object bundle https://c.daily.co/call-machine/versioned/0.58.0/static/call-machine-object-bundle.js: EvalError: Refused to evaluate a string as JavaScript because 'unsafe-eval' is not an allowed source of script in the following Content Security Policy directive:...
. I would prefer not to enable unsafe-eval
, and based on my brief googling, there's an option in Daily to do that by passing in an avoidEval
flag during call object creation: https://docs.daily.co/guides/privacy-and-security/content-security-policy. Would it be possible to add a flag to enable this behavior? Thanks!Vapi Support
06/05/2024, 7:04 AMVapi Support
06/05/2024, 7:04 AMavoidEval
similar to what you described for Daily. Content Security Policy issues, especially concerning the use of 'unsafe-eval', are critical for maintaining the security and functionality of web applications, but implementing a workaround or specific flag within Vapi's library would depend on Vapi's development and support framework.
For this type of feature request or modification in Vapi's behavior regarding CSP, it would be advisable to directly reach out to Vapi's development team or submit a feature request through their official channels if available. This ensures that your specific needs concerning CSP can be addressed appropriately and integrated into future updates if considered beneficial and aligned with their security policies.
If you have any other questions or need further assistance with Vapi's features or configurations, feel free to ask!Vapi Support
06/05/2024, 9:02 AMSahil
06/05/2024, 10:00 AM