Evaluate CSP thoroughly , consider moving to Headers:

lib/zcash_explorer_web/templates/layout/root.html.eex

@@ -4,7 +4,6 @@
     <meta charset="UTF-8">
     <meta http-equiv="X-UA-Compatible" content="IE=edge"/>
     <meta name="viewport" content="width=device-width, initial-scale=1.0"/>
-    <meta http-equiv="Content-Security-Policy" content="default-src 'unsafe-eval';">
     <%= live_title_tag assigns[:page_title] || " " %>
     <link rel="stylesheet" href="<%= Routes.static_path(@conn, "/css/app.css") %>"/>
     <%= csrf_meta_tag() %>