Changed hasEval test to avoid console error if browser supports securityPolicy.
If securityPolicy is not supported, use the previous try/catch procedure.
CSP errors are always sent to console, even when they get caught in a try/catch block.
changed hasEval logic to always test for eval when CSP securityPolicy.allowsEval is true
Merge pull request #26 from mangini/master

Changed hasEval test to avoid console error when browser supports security policy