Refused to evaluate a string as JavaScript because 'unsafe-eval' for Chrome Packaged App

[jnicolau]

Hi,

I've been getting an error that was described in this ticket that was closed:
#252

It should have been fixed since Jul 7.

I'm running polymer 4.2 on Chrome 38.0.2125.122 (MacOS) with vulcanize.
vulcanize --csp --strip index.html

Refused to evaluate a string as JavaScript because 'unsafe-eval' is not an allowed source of script in the following Content Security Policy directive: "script-src 'self' chrome-extension-resource:".
polymer.concat.js:4170

Looks like the error begins here:
var f = new Function('', 'return true;');

[tjsavage]

Closing this issue due to age and the release of version 1 of Polymer - please feel free to re-open if this is incorrect.