title: EvalError: Refused to evaluate a string as JavaScript because 'unsafe-eval' - Chrome extension
body: <p>I am migrating to manifest v3, I added all needed content security policy to manifest.json file. However I received the following error :</p>
  <blockquote>
  <p>EvalError: Refused to evaluate a string as JavaScript because
  unsafe-eval is not an allowed source of script in the following
  Content Security Policy directive: script-src self.</p>
  <p>at eval ()
  at inboxsdk.js:1177</p>
  </blockquote>
  <p>manifest.json :</p>
  <pre><code>&quot;content_scripts&quot;: [
      {
        &quot;all_frames&quot;: false,
        &quot;css&quot;: [ &quot;css/content.css&quot;, &quot;style.css&quot;, &quot;css/buttons.css&quot; ],
        &quot;include_globs&quot;: [ &quot;*://mail.google.*/*&quot; ],
        &quot;js&quot;: [ &quot;resources/jquery-3.3.1/jquery-3.3.1.min.js&quot;, &quot;js/api.js&quot;, &quot;js/inpage.js&quot;, &quot;js/menus.js&quot;, &quot;js/content.js&quot;, &quot;js/background.js&quot;, &quot;lib/q.js&quot;, &quot;js/inboxsdk.js&quot;, &quot;js/app.js&quot; ],
        &quot;matches&quot;: [ &quot;*://*/*&quot;, &quot;&lt;all_urls&gt;&quot; ],
        &quot;run_at&quot;: &quot;document_start&quot;
      },
    &quot;manifest_version&quot;: 3,
   &quot;content_security_policy&quot;: {
      &quot;extension_pages&quot;:&quot; object-src 'self'&quot;,
      &quot;sandbox&quot;: &quot;sandbox allow-scripts; https://apis.google.com https://apis.google.com/js/client.js https://ajax.googleapis.com https://designshack.net/favicon.ico https://ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js https://aui-cdn.atlassian.com https://netdna.bootstrapcdn.com https://tarruda.github.com  https://cdnjs.cloudflare.com https://ydn-src-2.storage.googleapis.com  https://www.google.com/  ; default-src 'self'; object-src 'self'&quot;
    },
  </code></pre>