diff --git a/conf/config.js b/conf/config.js
index e580383..90b206e 100644
--- a/conf/config.js
+++ b/conf/config.js
@@ -23,7 +23,7 @@ module.exports = {
     contentSecurity: [
         "default-src 'none'",
         "style-src 'unsafe-inline' 'self'",
-        "script-src 'self'",
+        "script-src 'self' 'unsafe-eval'",
         "font-src 'self'",
 
         /*  child-src is used to restrict iframes to a set of allowed domains.