Delay Execution of Eval Test

[john]

So that we don't throw errors due to CSP we should delay the script execution test in support.js until later. This will cause a regression (as the property won't exist until the test is run) thus we should land this in a major release.

More details about CSP: ​https://wiki.mozilla.org/Security/CSP

[bsterne]

Even though this won't be released until 1.5 it would be great to have a patch as soon as possible as sites are starting to implement CSP and I'd love to be let them patch themselves pre-release.

[Brandon Sterne <[email protected]…>]

I posted a patch over ​here and created a pull request.

[Brandon Sterne <[email protected]…>]

I cancelled the previous pull request and created a ​new patch that leaves the bulk of the changes in support.js.

[snover]

3rd party ​pull request

[Brandon Sterne]

Defer scriptEval test until first use to prevent Content Security Policy inline-script violations from occuring. Fixes #7371.

Changeset: 220a0ce1628d376ec14394c9b0be3c10f92a4cdb

[Rick Waldron]

(In #8200) Applying this patch will contradict this commit: ​http://bugs.jquery.com/ticket/7371 (which was a blocker)

​https://github.com/jquery/jquery/blob/220a0ce1628d376ec14394c9b0be3c10f92a4cdb/src/support.js

[jitter]

For those interested. Test case is here ​https://github.com/jquery/jquery/commit/9c763ad39d42c54d

[dmethvin]

Since the code now only runs this for IE 6-8 and those don't support CSP, it's safe to leave as-is.