Contacts menu uses javascript eval

[rullzer]

For https://github.com/orgs/nextcloud/projects/18

The contacts menu still uses handlebars and compiles the templates on the fly. This means that it uses unsafe eval and prevents a stricter CSP

[rullzer]

@skjnldsv could you have a look as to what has to be done how to set it (for compilation etc)?

[nextcloud-bot]

GitMate.io thinks possibly related issues are #4643 (Contacts in contact menu needs to be merged), #3316 (Contacts menu: API design), #9824 (contacts menu search must NOT show disabled users), #4557 (Missing tooltips in contacts menu actions.), and #5097 (scope of the contacts menu is too broad).