Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

CSP: Remove @babel/runtime from dependencies

See original GitHub issue

@babel/runtime contains a dependency regenenerator-runtime. And this break the Content-Security-Policy unsafe-eval.

I think, that @babel/runtime should not be a part of dependency. It must be a part of devDependency?!

Issue Analytics

State:
Created 2 years ago
Comments:7

Top GitHub Comments

1reaction

tellnescommented, Jul 16, 2021

Yes, but why do you mention me? I’m not a maintainer, just a random contributor sending the latest PR that got merged to @ant-design/react-slick.

0reactions

nicolo-ribaudocommented, May 22, 2022

Hi! This issue can probably be closed; @babel/runtime@7.18.0 does not depend on regenerator-runtime anymore.

Top Results From Across the Web

javascript - Webpack Babel Function("r", "regeneratorRuntime ...

I am using the webpack configurations below to build all my JS files: const path = require('path'); const glob = require('glob'); ...

Upgrade to Babel 7

In Babel 7, this command has been split out into its own @babel/node package, so if you are using that command, you'll want...

Code Splitting - webpack

Let's remove this duplication in next section. Prevent Duplication. Entry dependencies. The dependOn option allows to share the modules between the chunks ...

csp-generator - npm Package Health Analysis - Snyk

All security vulnerabilities belong to production dependencies of direct and indirect packages. License: MIT. Security Policy: No.

Security Hardening for Create-React-App (CRA)

npm install react-app-rewired customize-cra @melloware/csp-webpack-plugin --save-dev. TypeScript. Copy. Install runtime dependencies for ...