title: Content Security Policy directive: "script-src 'self' 'unsafe-eval'"
body: <p>I am using <code>urlive</code> library to load thumbnail images using the link.</p>
  
  <p>Outside of a Chrome extension the functionality works perfect. But while running the same functionality in a Chrome extension I was getting the error:</p>
  
  <blockquote>
    <p>"Refused to load the script <code>'http://query.yahooapis.com/v1/public/yql?callback=jQuery1111091462301090359…22+and+xpath%3D%22*%22+and+compat%3D%22html5%22&amp;format=xml&amp;_=1417426473922'</code> because it violates the following Content Security Policy directive: <code>"script-src 'self' 'unsafe-eval'".</code> </p>
  </blockquote>
  
  <pre><code>$(document).ready(function() {
    $('#thumbnail_url').on('input propertychange', function () {
      console.log('called');
      $('#thumbnail_url').urlive({
        callbacks: {
          onStart: function () {
            console.log('called1');
            $('.loading').show();
            $('.urlive-container').urlive('remove');
          },
          onSuccess: function (data) {
            $('.loading').hide();
            $('.urlive-container').urlive('remove');
          },
          noData: function () {
            $('.loading').hide();
            $('.urlive-container').urlive('remove');
          }
        }
      });
    }).trigger('input');
  });
  </code></pre>
  
  <p>I have tried all the possibilities. But I did not get the answer. Still the error raising for me while calling the <code>yahooapis</code>.</p>