Skip to content

Use pixi.js/unsafe-eval polyfills to remove unsafe-eval CSP requirement #1773

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
Copilot wants to merge 5 commits into
base: main
Choose a base branch
from
+615 −2
Open

Use pixi.js/unsafe-eval polyfills to remove unsafe-eval CSP requirement #1773

Show file tree
Hide file tree
Changes from 4 commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
b8c45d4
Initial plan
Copilot Feb 27, 2026
5c7f762
Initial plan for CSP unsafe-eval fix
Copilot Feb 27, 2026
4946a47
Fix: Import pixi.js/unsafe-eval polyfills to support strict CSP envir…
Copilot Feb 27, 2026
72b8731
Clean up unnecessary .gitignore entry
Copilot Feb 27, 2026
b720e97
Fix `this` context in missing_role validation fix onClick handlers (#…
Copilot Mar 3, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions modules/core/GraphicsSystem.js
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,3 +1,4 @@
import 'pixi.js/unsafe-eval';
import * as PIXI from 'pixi.js';
Comment on lines +1 to 2

Copilot AI Mar 2, 2026

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

pixi.js/unsafe-eval needs to be loaded before Pixi generates any new Function()-based sync functions. In this codebase, several modules import from pixi.js (e.g. modules/core/AbstractSystem.js, modules/Context.js) before GraphicsSystem.js is reached, so this import may not reliably run first. Consider moving the side-effect import to the earliest application entry module (or a dedicated Pixi bootstrap module that all Pixi imports depend on) to guarantee it executes before any pixi.js import/evaluation.

Copilot uses AI. Check for mistakes.
import { TAU, Viewport, numWrap, vecEqual, vecLength, vecRotate, vecScale, vecSubtract } from '@rapid-sdk/math';

Expand Down
Loading