Unusable with CSP directives

[mrudelle]

Ref to issue foliojs/pdfkit#757

This line evaluates generated code and thus cannot be used on projects relying on CSP. (without adding the unsafe-eval directive)

[firien]

see PR #22

[mrudelle]

Great to see work on this issue @firien, let's hope your work gets merged soon.

[jfoclpf]

I'd like also to stress that all my big project is not on green with Google CSP validator merely because of this issue, through pdfmake.

pdfmake admin refers:

Pdfmake using pdfkit library for creating pdf files, this has a dependency on restructure library where eval is used. It can not be replaced by another library. Pdfmake can not solve this problem, it must be resolved in restructure library.
Exists issue #28 and PR #22 in restructure. We can only wait for a new version of restructure library.

Anyway, thanks for the free library and let us wait :)

[jarrettj]

+1

[devongovett]

Should be fixed by #34. Released in v2.0.0.

[thomasazdon]

When will datatables with pdfmake include v2.0 - or is there a way to force it to use version 2.0 so that I can use native capability for PDFS that match my tables?

[blikblum]

You can try https://www.npmjs.com/package/pdfmake-lite. It does not supports IE

[liborm85]

@thomasazdon pdfmake not using v2.0 because dependency on restructure is in fontkit and there was no new version with restructure v2.0.

[liborm85]

Reopened.
Issue is not fixed completely:

restructure/src/VersionedStruct.js

Lines 9 to 10 in b9e40d2

	this.versionGetter = new Function('parent', `return parent.${this.type}`);
	this.versionSetter = new Function('parent', 'version', `return parent.${this.type} = version`);

[firien]

you can look at #22. it's 3 years old, but was updated for js a few months ago.

its a closed pull request, and i think that is why it is not asking to pull in new commits - but i did just tack on a new commit: 26dc864