How to remove unsafe-eval from chrome extension's content_security_policy
<p>I have removed all usages of <code>eval</code> and and <code>new Function</code> from a legacy chrome extension, that I am mantaining. How should I update the <code>content_security_policy</code> section in my <code>manifest.json</code>?</p>

<p>Currently it looks like this:</p>

<pre><code>{
  "content_security_policy": "script-src 'self' 'unsafe-eval' https://app.xyz.com; object-src 'self'"
}
</code></pre>

<p>If I understand the CSP in chrome extension correctly, after I removed all <code>eval</code> and <code>new Function</code> calls from the extension code I may remove the <code>unsafe-eval</code> from the <code>manifest.json</code></p>