DEV: Remove unsafe-eval from development CSP (#8569)

- Refactor source_url to avoid using eval in development
- Precompile handlebars in development
- Include template compilers when running qunit
- Remove unsafe-eval in development CSP
- Include unsafe-eval only for qunit routes in development

lib/content_security_policy.rb

@@ -4,8 +4,8 @@ require 'content_security_policy/extension'
 
 class ContentSecurityPolicy
   class << self
-    def policy(theme_ids = [])
-      new.build(theme_ids)
+    def policy(theme_ids = [], path_info: "/")
+      new.build(theme_ids, path_info: path_info)
     end
 
     def base_url
@@ -14,12 +14,13 @@ class ContentSecurityPolicy
     attr_writer :base_url
   end
 
-  def build(theme_ids)
+  def build(theme_ids, path_info: "/")
     builder = Builder.new
 
     Extension.theme_extensions(theme_ids).each { |extension| builder << extension }
     Extension.plugin_extensions.each { |extension| builder << extension }
     builder << Extension.site_setting_extension
+    builder << Extension.path_specific_extension(path_info)
 
     builder.build
   end