im getting this error
Content Security Policy of your site blocks the use of ‘eval’ in JavaScript`
The Content Security Policy (CSP) prevents the evaluation of arbitrary strings as JavaScript to make it more difficult for an attacker to inject unathorized code on your site.
To solve this issue, avoid using eval(), new Function(), setTimeout([string], …) and setInterval([string], …) for evaluating strings.
If you absolutely must: you can enable string evaluation by adding unsafe-eval as an allowed source in a script-src directive.
⚠️ Allowing string evaluation comes at the risk of inline script injection.
1 directive
Source location Directive Status
script-src blocked
my project is here https://github.com/Batmanninja1991/portfolio
my .htaccess
BEGIN Content Security Policy
Header set Content-Security-Policy “default-src ‘self’; script-src ‘self’; style-src ‘self’ ‘unsafe-inline’; img-src ‘self’ data:; font-src ‘self’;”
# END Content Security Policy
if you need anymore information let me know..just so confused on this
tried using
the unsafe-eval which did not change anything and produced the same error..