Keeping in mind that adding unsafe-eval to your CSP is basically removing the whole point of CSP and making your site less secure as a result.
Using eval is a code smell, and it should be fixed upstream as you pointed above.
Keeping in mind that adding unsafe-eval to your CSP is basically removing the whole point of CSP and making your site less secure as a result.
Using eval is a code smell, and it should be fixed upstream as you pointed above.