fixed hasEval in case of Chrome Apps

Checking for document.securityPolicy.allowsEval won't work in that environment.