[bug959270v2] - Added more sources to policy; added unsafe-eval