In underscore.js, template rendering causes violation of the 'unsafe-eval' property, with CSP error at following line:
render = new Function(settings.variable || 'obj', '_', source);
The solution to this on some forums have been to Sandbox the underscore according to the Chrome documentation.
But how will this solution work for a web based application where there are number of users with different browsers? Are there any alternate solutions to this problem? Please note that the application I am working on is large and heavy, so code changing will take a lot of time.
eval
so blocked by CSP. I don't think there's a way around this. I've not used underscore.js before, but I've read that other templating libraries allow you to precompile the template, and this is the only way around it, but this may not work for you.