refused to evaluate a string as javascript because 'unsafe-eval' is not an allowed source of script in the following content security policy directive: "script-src 'self'".
"content_security_policy": "script-src 'self' 'unsafe-eval'; object-src 'self'"