This CSP header with wildcards and 'unsafe-eval' is basically useless, so you could remove it anyways.