Content Security Policy - "unsafe-eval"

[AllaZhbanova]

Steps to Reproduce
Add a CSP (in your html entry file) that doesn't allow for "unsafe-eval"

Expected behavior
Not throw a CSP error

Actual behavior
Throws a CSP error

Refused to evaluate a string as JavaScript because 'unsafe-eval' is not an allowed source of script
Additional context
I've tracked this down to ketcher-standalone/src/generate/libindigo.js line 1230. Specifically new Function will cause this.

Don't have enough context to make a change to this but essentially new Function should go away otherwise CSP won't let it run.

[even1024]

The problem seems to be common for WASM.

WebAssembly/content-security-policy#7