Merged Review Issue: unsafe eval

[tildelowengrimm]

This is one of the PR issues from #14734

Check this out: #14734 (comment)

[mrose17]

there are two illuminating posts:

• Firefox no longer detecting MetaMask as installed MyCryptoHQ/MyCrypto#2061
• Inpage injection fails in Firefox under some CSP settings MetaMask/metamask-extension#3133

which come down to the same issue we are seeing. the latter issue is perhaps more instructive when looking at https://github.com/brave/browser-laptop/blob/master/app/extensions.js#L305

@diracdeltas - the short answer to #14734 (comment) is that, at present, the answer appears to be yes ... providing that i can review the code corresponding to the two hashes. i have asked the metamask folks for help in identifying the fragments for review.