[fix] evaluate object on safari (only if vulcanize --csp)