Can I use jscl.evaluateToString but without calling JavaScript's eval?

[bitspook]

Is it possible to run jscl in browser in "interpreter" mode? i.e to give it lisp forms in string form, and evaluate them in a way which do not involve calling JavaScript's eval in any way.

You can check what I am doing in this github repo: spookfox

My use-case:
Running Lisp in a browser addon, to extend this addon at run-time.

My problem:
Browser don't allow executing javascript in at runtime. Only code which is packaged into the addon at build time can be executed.

My chosen solution:
Pack an interpreter with my addon. It is not possible to do eval('console.log("abc")'), but I can send a DSL and interpret it. I want to use CL in lisp, and jscl seems perfect.

Where I am stuck

I am using Parcel for building my addon. For some reason, when I run parcel in development mode, I can eval lisp with Jscl. But when I build the addon and load that, I get CSP errors on evaling lisp.

[bitspook]

I was mistaken. This is not a jscl problem, this is a web-extensions problem. I didn't realize I can pass content_security_policy in the extension manifest file, which enable running JS eval.