hotfix: bypass testSafari.js no eval directive

deploy/csp/index.js

@@ -3,7 +3,10 @@ const bodyParser = require('body-parser')
 
 let ALLOWED_DEFAULT_SRC, DATA_SRC
 
-const reportOnly = process.env.NODE_ENV !== 'production'
+// TODO bandaid solution
+// OKD/nginx reverse proxy seems to strip csp header
+// without it, testSafari.js will trigger no unsafe eval csp
+const reportOnly = true || process.env.NODE_ENV !== 'production'
 
 try {
   ALLOWED_DEFAULT_SRC = JSON.parse(process.env.ALLOWED_DEFAULT_SRC || '[]')