Breaking Through XSS: Bypassing CSP and Dealing with EvalError I’m attempting an XSS attack on my server, which has CSP configured as follows: