Content-Security-Policy now uses 'strict-dynamic'

[david (David Taylor)]

No change there - you can still add ‘unsafe eval’ (with the quotes) to the content security script src site setting.