Support running jasmine within CSP (remove eval)

[fixes #503]