Is it safe to remove 'unsafe-eval' from CSP?