Cannot create new relations

[gythaogg]

Popups are blocked by the following JS error

Uncaught EvalError: Refused to evaluate a string as JavaScript because 'unsafe-eval' is not an allowed source of script in the following Content Security Policy directive: "default-src 'self' 'unsafe-inline' cdnjs.cloudflare.com cdn.jsdelivr.net fonts.googleapis.com ajax.googleapis.com cdn.rawgit.com *.acdh.oeaw.ac.at unpkg.com fonts.gstatic.com cdn.datatables.net code.highcharts.com *.acdh-dev.oeaw.ac.at *.acdh.oeaw.ac.at openstreetmap.org *.openstreetmap.org".

    at new Function (<anonymous>)
    at [email protected]:1:24672
    at Tr ([email protected]:1:35877)
    at HTMLAnchorElement.a ([email protected]:1:24647)
(anonymous) @ [email protected]:1
Tr @ [email protected]:1
a @ [email protected]:1Understand this error

Related to acdh-oeaw/apis-instance-nomansland-dev#14

Update from @b1rger

Introduced in a2e80fa
Oke, long debugging session later: as the error messages says, the problem is CSP, which enabled in our default settings, but which is not enabled in the discworld sample project. Apparently I did only test this commit with the sample project. For now it helps to add 'unsafe-eval' to the CSP_DEFAULT_SRC, but we should try to find a better fix. Therefore I suggest to only do this in the projects and not in the default settings.