Changed hasEval test to avoid console error when browser supports security policy


If securityPolicy is not supported, use the old try/catch procedure.
(CSP errors are always sent to console, even when they get caught in a try/catch block)