Fix CSP 'unsafe-eval' directive violation