"HEADER Content-Security-Policy"

Hi,
I am setting the HEADER Content-Security-Policy with the 'unsafe-inline' for all types with the needed url exceptions.
I am not setting anything for jEvents. All works well except when in the frontend I pick the edit on an existing event and in the popup I select "Copy and edit event". Saving the instance of the copied event crashes.

Sequence
1) When I validate the "edit or a "Copy and edit event" first error in the chrome console is:
"Refused to evaluate a string as JavaScript because 'unsafe-eval' is not an allowed source of script in the following Content Security Policy directive: "script-src 'self'"
The source points to the last statement "document.getElem...

function setupRepeats() {
hideEmptyJevTabs();
var freq = "NONE";
document.getElementById(freq).checked = true;
toggleFreq(freq, true);
var by = "jevbd";
document.getElementById(by).checked = true;
var by = "byday";
toggleWhichBy(by);
var cu = "cu_count";
document.getElementById(cu == "cu_until" ? "cuu" : "cuc".checked = true;

there is also an error in trying to load an image


2) When I edit the copy and then press the save button I get:
Error: 0
Call to a member function evdet_id() on null

and in the console I get the image I attach here.

An edit of an event works well when I save. It is the copy of an existing instance that is problematic when I save.

What is your suggestion ?

Thanks
Roland