Skip to content

Conversation

sangmokh
Copy link

@sangmokh sangmokh commented Sep 21, 2025

Issue

#1783

image

Analysis

The unsafe-eval CSP error occurs in Form.tsx when @rjsf/validator-ajv8 attempts to use eval() for JSON schema validation. This happens because the library falls back to runtime compilation when precompiled validators are not available.

Solution / Workaround

Addressing the root cause by migrating to precompiled validators would require significant refactoring, as Form.tsx is used with multiple schema configurations across multiple components. Yet the Remote Redux DevTool feature is unsuable without fixing the form error.

Two simple workarounds were considered:

  • Disable form valuation of the Connection Setting form
  • Update the CSP in remote.pug to allow unsafe-eval

This PR opted for the first approach because the UI already constrains the port field to numeric values and the secure field to boolean values, making the eval-based ajv validation redundant. The second approach was avoided as it would compromise the security of the Remote DevTools window.

Copy link

changeset-bot bot commented Sep 21, 2025

🦋 Changeset detected

Latest commit: 7b0285b

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 11 packages
Name Type
remotedev-redux-devtools-extension Patch
@redux-devtools/ui Patch
@redux-devtools/app-core Patch
@redux-devtools/app Patch
@redux-devtools/inspector-monitor-test-tab Patch
@redux-devtools/rtk-query-monitor Patch
@redux-devtools/slider-monitor Patch
test-demo Patch
@redux-devtools/cli Patch
rtk-query-demo Patch
slider-todomvc Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@sangmokh sangmokh force-pushed the issue-1783-remote-conn-csp-error branch from b8ebaf2 to 7b0285b Compare September 21, 2025 08:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant