CSP directives

[luffynando]

<meta http-equiv="Content-Security-Policy" content="script-src 'self' 'unsafe-eval'">

vs

<meta http-equiv="Content-Security-Policy" content="script-src 'self' blob:">

First option shows electron app warning security vs second works apparently good, what is advantages for use option one or option two?

[cawa-93]

First example was added after this and must be changed after this. It's just that I haven't had time to make changes yet.