eval() in a straitjacket: running user JavaScript under a strict CSP October 17, 2026 · Dev.to Read full story at source