Following OutSystems’ continued adherence to security best practices, policies, and regulations, the unsafe-eval and unsafe-inline Content Security Policy (CSP) directives are now optional. The previous behavior, enabling the use of these directives, is kept by default to ensure maximum compatibility. However, documentation has been added to assist in the removal of ‘unsafe’ directives within your reactive web apps in an effort to improve the runtime security.