fix(runtime): use document.defaultView to get real window object to solve csp issue (#3163)

Author: 2heal1

.changeset/cyan-emus-prove.md

@@ -0,0 +1,5 @@
+---
+'@module-federation/runtime': patch
+---
+
+fix(runtime): use document.defaultView to get real window object to solve csp issue

packages/runtime/src/global.ts

@@ -28,8 +28,10 @@ export interface Federation {
 
 export const nativeGlobal: typeof global = (() => {
   try {
-    return new Function('return this')();
+    // get real window (incase of sandbox)
+    return document.defaultView;
   } catch {
+    // node env
     return globalThis;
   }
 })() as typeof global;