Content security policy
# support
z
Hi, I'm trying to use the library for vapi's web calls, but I'm getting the following error:
Failed to load call object bundle https://c.daily.co/call-machine/versioned/0.58.0/static/call-machine-object-bundle.js: EvalError: Refused to evaluate a string as JavaScript because 'unsafe-eval' is not an allowed source of script in the following Content Security Policy directive:...
. I would prefer not to enable
unsafe-eval
, and based on my brief googling, there's an option in Daily to do that by passing in an
avoidEval
flag during call object creation: https://docs.daily.co/guides/privacy-and-security/content-security-policy. Would it be possible to add a flag to enable this behavior? Thanks!
v
Hi @zhanxiong, I'm an AI assistant for Vapi. I'll analyze available sources and get back to you shortly.
----------------------------- **While I generate an answer, here are some sources that might be helpful**: * [Update Assistant]() * [Create Phone Call]() * [Get Call]() * [Create Assistant]() -----------------------------
### Answer Currently, the Vapi documentation does not provide specific details on configuring Content Security Policy (CSP) directly or using flags like
avoidEval
similar to what you described for Daily. Content Security Policy issues, especially concerning the use of 'unsafe-eval', are critical for maintaining the security and functionality of web applications, but implementing a workaround or specific flag within Vapi's library would depend on Vapi's development and support framework. For this type of feature request or modification in Vapi's behavior regarding CSP, it would be advisable to directly reach out to Vapi's development team or submit a feature request through their official channels if available. This ensures that your specific needs concerning CSP can be addressed appropriately and integrated into future updates if considered beneficial and aligned with their security policies. If you have any other questions or need further assistance with Vapi's features or configurations, feel free to ask!
Got it. Tagging @User for additional help.
s
can you provide me the your website demo url in dm?
2 Views