#### 复现路径 以下代码示例，在华为、vivo 等机型调用即可复现 ``` wx.previewImage({ current: "https://image.dqccc.com/c_photo/2019/03/12/1145061645219.jpg", //数据源 urls: [ "https://image.dqccc.com/c_photo/2019/03/12/1145061645219.jpg", "https://image.dqccc.com/c_photo/2019/03/12/1143521794116.jpg", "https://image.dqccc.com/c_photo/2019/03/09/1219124252866.jpg" ] }); ```

[图片] Content Security Policy of your site blocks the use of 'eval' in JavaScriptThe Content Security Policy (CSP) prevents the evaluation of arbitrary strings as JavaScript to make it more difficult for an attacker to inject unathorized code on your site.To solve this issue, avoid using [代码]eval()[代码], [代码]new Function()[代码], [代码]setTimeout([string], ...)[代码] and [代码]setInterval([string], ...)[代码] for evaluating strings.If you absolutely must: you can enable string evaluation by adding [代码]unsafe-eval[代码] as an allowed source in a [代码]script-src[代码] directive.⚠️ Allowing string evaluation comes at the risk of inline script injection.如图所示