結果 : content security policy blocks the use of eval in javascript