Compiles but never invokes, so nothing in the expression can run here. EvalError is treated as
"cannot tell" rather than "invalid": under a Content-Security-Policy that forbids new Function,
every filter would otherwise be reported as broken in the browser while working perfectly on the
server that actually evaluates it.
Whether a filter expression parses.
Compiles but never invokes, so nothing in the expression can run here.
EvalErroris treated as "cannot tell" rather than "invalid": under a Content-Security-Policy that forbidsnew Function, every filter would otherwise be reported as broken in the browser while working perfectly on the server that actually evaluates it.