Content Security Policy - "unsafe-eval"

*Steps to Reproduce*
Add a CSP (in your html entry file) that doesn't allow for "unsafe-eval"

*Expected behavior*
Not throw a CSP error

*Actual behavior*
Throws a CSP error

Refused to evaluate a string as JavaScript because 'unsafe-eval' is not an allowed source of script
Additional context
I've tracked this down to ketcher-standalone/src/generate/libindigo.js line 1230. Specifically new Function will cause this.

Don't have enough context to make a change to this but essentially new Function should go away otherwise CSP won't let it run.