Changed hasEval test to avoid console error if browser supports securityPolicy.
If securityPolicy is not supported, use the previous try/catch procedure.
CSP errors are always sent to console, even when they get caught in a try/catch block.