add unsafe-eval for Bitcore

Bitcore use eval()