Insecure Content-Security-Policy warning

[nuthinking]

Running the example with the latest Electron I get a warning:

/Users/.../node_modules/electron/dist/Electron.app/Contents/Resources/electron.asar/renderer/security-warnings.js:188 Electron Security Warning (Insecure Content-Security-Policy) This renderer process has either no Content Security Policy set or a policy with "unsafe-eval" enabled. This exposes users of this app to unnecessary security risks.

For more information and help, consult https://electronjs.org/docs/tutorial/security.
This warning will not show up once the app is packaged.
warnAboutInsecureCSP @ /.../node_modules/electron/dist/Electron.app/Contents/Resources/electron.asar/renderer/security-warnings.js:188

[nuthinking]

This seems to be an new Electron "feature": https://stackoverflow.com/questions/48854265/why-do-i-see-an-electron-security-warning-after-updating-my-electron-project-t

[vinayprydotinfotech]

Same Issue what is the solution?. i was trying active learning option in VoTT to make auto prediction of Objects of Interests

[Thomas78180]

I found a starting explanation: https://developer.mozilla.org/fr/docs/Web/HTTP/Headers/Content-Security-Policy
Trying <meta http-equiv="Content-Security-Policy" content="http: 'unsafe-eval'">
but got Refused to execute inline script because it violates the following Content Security Policy directive: "default-src https: 'unsafe-eval'". Either the 'unsafe-inline' keyword, a hash ('sha256-KoKpicUSEfE3O7ANGS5BbUQYVhP8HGszEgSeWSkOCUE='), or a nonce ('nonce-...') is required to enable inline execution. Note also that 'script-src' was not explicitly set, so 'default-src' is used as a fallback.

i tried <meta http-equiv="Content-Security-Policy" content="worker-src https: 'unsafe-eval'"> but no result

See: [(https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy)] it shoulb be the solution