Content Security Policies: problem when use of console commands like transfer.

This add unsafe eval to script src header.