title: Issue With Content Security Policy in Chrome Extension
body: <p>This is from my chrome extension.</p>
  
  <pre><code>"permissions": [
  "storage",
  "https://app.socialschools.nl/*",
  "http://*.google.com/", // Refer to http://goo.gl/CPeqK http://goo.gl/U3Vev
  "bookmarks", // http://code.google.com/chrome/extensions/bookmarks.html
  "chrome://favicon/",
  "clipboardRead", // document.execCommand('paste').
  "clipboardWrite", // document.execCommand('copy' OR 'cut')
  "contextMenus", //http:///code.google.com/chrome/extensions/contextMenus.html
  "cookies", // http://code.google.com/chrome/extensions/cookies.html
  // "experimental", // http://code.google.com/chrome/extensions/dev/experimental.html
  "fileBrowserHandler", // http://goo.gl/GqbrP
  "geolocation", // http://dev.w3.org/geo/api/spec-source.html
  "history", // http://code.google.com/chrome/extensions/history.html
  "idle", // http://code.google.com/chrome/extensions/idle.html
  "management", // http://code.google.com/chrome/extensions/management.html
  "notifications", // code.google.com/chrome/extensions/notifications.html
  "tabs", // http://code.google.com/chrome/extensions/tabs.html +windows.html
  "tts", // http://code.google.com/chrome/extensions/tts.html
  "ttsEngine", // http://code.google.com/chrome/extensions/ttsEngine.html
  "unlimitedStorage"
  ],
  
  "content_security_policy":"script-src 'unsafe-eval' https://apps.socialschools.nl/;object-src 'self';connect-src https://app.socialschools.nl/",
  </code></pre>
  
  <p>I have added the API url (<a href="https://app.socialschools.nl" rel="nofollow">https://app.socialschools.nl</a>) in both script-src, permissions and connect-src. Still, I get this error:</p>
  
  <pre><code>Refused to load the script 'https://app.socialschools.nl/apiv1/public/924/post/?callback=jQuery16200253…109_1398087409246&amp;only_descendants=false&amp;number_of_items=5&amp;_=1398087409299' because it violates the following Content Security Policy directive: "script-src 'unsafe-eval' https://apps.socialschools.nl/".
  </code></pre>
  
  <p>I can't seem to understand what I am missing here? Can someone please help me out in figuring out this issue. </p>
  
  <p>Thanks in advance.</p>