Iframe api unsafe-eval

[icew1nd]

Plan

Free/Premium

Country

Denmark

Device

Websites on chrome

My Question or Issue

When using the iframeapi it will not work unless you allow unsafe-eval in your CSP which is a no-go for most websites.

from the console:

Uncaught EvalError: Refused to evaluate a string as JavaScript because 'unsafe-eval' is not an allowed source of script in the following Content Security Policy directive: "script-src 'self' 'unsafe-inline' open.spotify.com embed-cdn.spotifycdn.com *.g.doubleclick.net".