title: "Code generation from string disallowed" in jquery library
body: <p>I am trying to modify my web software to use a Content Security Policy.  When I compile without it, everything runs fine.  When I include CSP headers, Chrome flags an error in two places (using the Chrome developer tools): </p>
  
  <ul>
  <li>A "Refused to execute inline script because it violates the Content
  Security Policy..." error in the first line of every ASPX or HTML file -
  even though there is no inline JavaScript!</li>
  <li>A "Code generation from strings disallowed for this context" error - this is
  noted in the jquery-1.8.3.min.js file but appears to originate from
  some JQuery that I've written where I am iterating over data coming
  down from a web service to generate items on the page.</li>
  </ul>
  
  <p>So, two questions: why am I always being told the every file is in violation even if it is just a pure static HTML file?</p>
  
  <p>Second, does content security really mean that I can't use strings when generating html using JQuery - even when it is in a dedicated .js file?  I've looked at information all over the web and this particular issue really isn't addressed.  So...what are the rules here?  </p>
  
  <p>All I really want is to prevent A) inline JavaScript and B) the loading of external JS files.</p>
  
  <p>Any help would be very much appreciated!</p>
  
  <p><strong>UPDATE</strong>: The string errors went away when I upgrade JQuery/JQueryUI to 1.8.2 / 1.9.1.  The version that I was using before were only about a month old so this appears to be a recent improvement in JQuery.  I can't be <em>sure</em> that this was JQuery though as I've been making other changes as well but it makes sense to be on the more recent JQuery if you can.</p>