[FIX] remove "unsafe-eval" from manifest.json