eval() in a straitjacket: running user JavaScript under a strict CSP

· Dev.to