TerriaMap produces a blank screen on starting-up unless CSP policy unsafe-eval is on

[t83714]

TerriaMap will produce a blank screen unless CSP policy unsafe-eval is on

When the following CSP policy is add to response header:

content-security-policy: script-src 'self' 'unsafe-inline' browser-update.org blob:; object-src 'none'; worker-src 'self' blob:

TerriaMap will show a blank screen on starting-up and report the following on the console:

The error doesn't seem triggered by any JSONP calls. Instead, it seems it triggered by the package buffer. I can't find any things other than webpack or terria-server depends on it --- which should not be part of the frontend bundle.

How to reproduce

• Check out this PR Update terria magda-io/magda-preview-map#6
• Build & Push docker image to local cluster local docker registry
• Build & deploy Magda
• Edit preview-map deployment and change image to localhost:5000/data61/magda-preview-map:latest and pull policy to Always
• Access http://cluser-ip:30100/preview-map/ (must access through the gateway to make sure CSP headers are attached)