CSP security header script-src issue

I have / had the same problem some plugin or what ever needs unsafe-eval, if its forbidden the app will not start. Did not found a valid solution