alibuc

Thanks, modifying the js file on an ad-hoc basis is not my preferred approach but personally I can wait until you resolve it. I can’t speak for @mikemackechnie

Hi,

I am testing CSP for a client and noticed it didn’t like the first setTimeout function in the file:

 ./plugins/mailchimp-for-woocommerce/public/js/mailchimp-woocommerce-public.min.js

Changing from:

mailchimpReady=function(e){/in/.test(document.readyState)?setTimeout("mailchimpReady("+e+")",9):e()}

to:

mailchimpReady=function(e){/in/.test(document.readyState)?setTimeout(() => "mailchimpReady("+e+")",9):e()}

seemed to work, possibly caused by this functionality…

https://stackoverflow.com/questions/72061796/using-settimeout-with-strings-triggers-unsafe-eval-alert