message: add 'unsafe-eval' to script-src in CSP.
diff: @@ -26,7 +26,7 @@ See https://github.com/adobe-type-tools/cmap-resources
  <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
  <meta name="google" content="notranslate">
  <meta http-equiv="X-UA-Compatible" content="IE=edge">
  - <meta http-equiv="Content-Security-Policy" content="default-src localhost:* 127.0.0.1:*; connect-src localhost:* 127.0.0.1:* ws://localhost:* ws://127.0.0.1:*; style-src localhost:* 127.0.0.1:* 'unsafe-inline';">
  + <meta http-equiv="Content-Security-Policy" content="default-src localhost:* 127.0.0.1:*; script-src localhost:* 127.0.0.1:* 'unsafe-eval'; connect-src localhost:* 127.0.0.1:* ws://localhost:* ws://127.0.0.1:*; style-src localhost:* 127.0.0.1:* 'unsafe-inline';">
  <title>PDF.js viewer</title>
  <!--
  