[CSP/CORS] Console warnings for vuedraggable eval() and blocked PostHog telemetry requests

[EnchdFire]

Please confirm the following.

• I checked the existing issues for duplicate problems
• I have tried resolving the issue using the support portal
• I have ensured my Modrinth App installation is up to date

What version of the Modrinth App are you using?

0.21.4

What operating systems are you seeing the problem on?

Windows

Describe the bug

When inspecting DevTools in the Modrinth App, multiple CSP and CORS related issues appear in the console-issues tab:

1. CSP Violation: vuedraggable.umd-d1ZbNssH.js attempts string evaluation (eval), which is blocked by the Content Security Policy under the script-src directive.
2. CORS Errors: Multiple fetch requests to posthog.modrinth.com fail from origin http://tauri.localhost due to missing Access-Control-Allow-Origin headers, resulting in repeated failed retry attempts (retry_count).

Steps to reproduce

1- Open Modrinth App.
2- Open the devtools.
3- Click to the Issues tab.
4- Observe the CSP blocked eval() warning and failing CORS telemetry fetch requests.

Expected behavior

1. Dependencies should comply with the app's CSP policies without triggering eval blocks.
2. Telemetry and network requests from http://tauri.localhost should pass CORS checks or handle blocked requests gracefully without excessive retries.

Additional context

Console Log Sample:

• Content Security Policy of your site blocks the use of eval in JavaScript (vuedraggable.umd-d1ZbNssH.js)
• Access to fetch at 'https://posthog.modrinth.com/...' from origin 'http://tauri.localhost' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource.

[Prospector]

don't open devtools