03:27
<ljharb>
would CSP even allow a string to be passed into sr.evaluate?
04:25
<Jack Works>
would CSP even allow a string to be passed into sr.evaluate?
If the script hash is matching
04:25
<ljharb>
ok, so effectively no :-)
04:26
<ljharb>
since only the top-level app can do anything with hashes and CSP settings, that means that packages can't use ShadowRealm.evaluate at all :-/
04:27
<Jack Works>
Not a bad thing
04:29
<Jack Works>
We will have module blocks in the future