add unsafe-eval to policy
add a donate link