[Reopen] Crate not working with Content Security Policy

[CxRes]

I am reopening #13 since I think I have found an instance of eval that is not negated by setting "no-eval"=true.

In src/util/validate/index.ts Line 62, there is an eval that I don't quite understand the purpose of. However, it seems this code is there to validate options to Crate?

Perhaps it can be made optional or this eval removed another way?

This small change will I believe solve much of the problems with using CSP!