title: Call to function() blocked by CSP even after adding 'unsafe-eval'
body: <p>I am working on a NodeJS Project and I'm using <code>CSP</code> (<a href="http://www.w3.org/TR/CSP/" rel="nofollow">Content Security Policy</a>). </p>
  
  <p>I'm using a external plugin <code>FullCalendar</code> which is being blocked by csp giving the following error:</p>
  
  <p><code>Error: call to Function() blocked by CSP</code></p>
  
  <p>I use <code>script-src 'self' 'unsafe-eval';</code> to override it but did not work in  firefox. In other browser it is working fine.</p>
  
  <p>I got stuck on this issue by 4h.</p>
  
  <p>It would be helpful to get the solution.</p>
  
  <p>I am using the following format in CSP restrictions. </p>
  
  <blockquote>
    <p>X-Content-Security-Policy: default-src *; script-src 'self' 'unsafe-eval'; object-src 'none'; style-src 'self' 'unsafe-inline img-src *;options eval-script;<br/>
    X-WebKit-CSP: default-src *;  script-src 'self' 'unsafe-eval'; object-src 'none'; style-src 'self' 'unsafe-inline img-src *;<br/>
    Content-Security-Policy:  default-src *;  script-src 'self' 'unsafe-eval'; object-src 'none'; style-src 'self' 'unsafe-inline img-src *;     </p>
  </blockquote>