Scripts injected via `eval` are not allowed with `trusted-types-eval` without `require-trusted-types-for 'script'`.