Testing that "Evaluate JavaScript" breakpoint actions work correctly in the presense of a Content Security Policy that doesn't include 'unsafe-eval'.