Content Security Policy Directive: "script-src 'self' 'unsafe-eval'"

I am using urlive library to load thumbnail images using the link. Outside of a Chrome extension the functionality works perfect. But while running the same functionality in a Chro

Solution 1:

Add the yahoo domain to the rule: "script-src 'self' 'unsafe-eval' http://query.yahooapis.com"

For more information: http://content-security-policy.com/