CFEditor causes CSP errors

[tarjei]

If you configure your server (nginx) with:

add_header Content-Security-Policy "script-src 'self' https: 'unsafe-eval'";

Then you will get the following error after upgrading to 6.4:

Error with Permissions-Policy header: Origin trial controlled feature not enabled: 'interest-cohort'.
admin-bundle.min.js:30 Uncaught EvalError: Refused to evaluate a string as JavaScript because 'unsafe-eval' is not an allowed source of script in the following Content Security Policy directive: "default-src 'self' http: https: ws: wss: data: blob: 'unsafe-inline'".

    at Function (<anonymous>)
    at new CKEDITOR.template (admin-bundle.min.js:30:18389)
    at admin-bundle.min.js:33:7044
    at admin-bundle.min.js:33:7304
    at admin-bundle.min.js:33:10095
    at admin-bundle.min.js:43:5038
CKEDITOR.template @ admin-bundle.min.js:30
(anonymous) @ admin-bundle.min.js:33
(anonymous) @ admin-bundle.min.js:33
(anonymous) @ admin-bundle.min.js:33
(anonymous) @ admin-bundle.min.js:43