Fix CSP 'unsafe-eval' error preventing Remote DevTools connection

[sangmokh]

Issue

#1783

Analysis

The unsafe-eval CSP error occurs in Form.tsx when @rjsf/validator-ajv8 attempts to use eval() for JSON schema validation. This happens because the library falls back to runtime compilation when precompiled validators are not available.

Solution / Workaround

Addressing the root cause by migrating to precompiled validators would require significant refactoring, as Form.tsx is used with multiple schema configurations across multiple components. Yet the Remote Redux DevTool feature is unsuable without fixing the form error.

Two simple workarounds were considered:

• Disable form valuation of the Connection Setting form
• Update the CSP in remote.pug to allow unsafe-eval

This PR opted for the first approach because the UI already constrains the port field to numeric values and the secure field to boolean values, making the eval-based ajv validation redundant. The second approach was avoided as it would compromise the security of the Remote DevTools window.

[changeset-bot]

🦋 Changeset detected

Latest commit: 6e7e0bd

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 11 packages

Name	Type
remotedev-redux-devtools-extension	Patch
@redux-devtools/ui	Patch
@redux-devtools/app-core	Patch
@redux-devtools/app	Patch
@redux-devtools/inspector-monitor-test-tab	Patch
@redux-devtools/rtk-query-monitor	Patch
@redux-devtools/slider-monitor	Patch
test-demo	Patch
@redux-devtools/cli	Patch
rtk-query-demo	Patch
slider-todomvc	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[kyranjamie]

Can this be merged soon?

[msanchezdev]

Waiting for this as well

[erikmueller]

Wanted to chime in as I'm also running on a manually patched version and waiting for this to land.