title: How to remove unsafe-eval from chrome extension's content_security_policy
body: <p>I have removed all usages of <code>eval</code> and and <code>new Function</code> from a legacy chrome extension, that I am mantaining. How should I update the <code>content_security_policy</code> section in my <code>manifest.json</code>?</p>
  
  <p>Currently it looks like this:</p>
  
  <pre><code>{
    "content_security_policy": "script-src 'self' 'unsafe-eval' https://app.xyz.com; object-src 'self'"
  }
  </code></pre>
  
  <p>If I understand the CSP in chrome extension correctly, after I removed all <code>eval</code> and <code>new Function</code> calls from the extension code I may remove the <code>unsafe-eval</code> from the <code>manifest.json</code></p>