Avoid eval

[nicksellen]

What does this PR do?

CSP is upset about eval, and apparantly if we make this change it'll be happy again :)

See webpack/webpack#6461 (comment)

Links to related issues

#1068

Checklist

• added a test, or explain why one is not needed/possible...
• no unrelated changes
• asked someone for a code review
• joined #karrot-dev channel at https://slackin.yunity.org
• added an entry to CHANGELOG.md (description, pull request link, username(s))

[codecov]

Codecov Report

Merging #1141 into master will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff           @@
##           master    #1141   +/-   ##
=======================================
  Coverage   60.87%   60.87%           
=======================================
  Files         224      224           
  Lines        3737     3737           
  Branches      633      633           
=======================================
  Hits         2275     2275           
  Misses       1461     1461           
  Partials        1        1

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 0c17e42...c00e33a. Read the comment docs.

[tiltec]

We could also try node: false and see if all dependencies cope with it.

[nicksellen]

Seems ok so far! It builds, and clicking around locally is ok. I'll push the change.

[nicksellen]

Nope, has an error. On https://deploy-preview-1141--karrot.netlify.com/ when trying to edit my profile.

ReferenceError: "process is not defined"

vuelidate tries to access process.env.BUILD in ./vuelidate/src/withParamsBrowser.js

Seems they should fix it, see vuelidate/vuelidate#365, but we can force it. I guess "web" is the correct value.