!255 Add unsafe-eval CSP to backend application

Merge pull request !255 from ougongchang/add_csp

mindinsight/backend/application.py

@@ -45,6 +45,7 @@ def get_security_headers():
         'frame-src': ["'self'"] + domain_white_list,
         'frame-ancestors': ["'self'"] + domain_white_list,
         'default-src': ["'self'"],
+        'script-src': ["'self'", "'unsafe-eval'"]
     }
 
     headers = {