Refused to evaluate a string as JavaScript because 'unsafe-eval' is not an allowed source of script