When using __mf in a website with a Content-Security-Policy that does not allow unsafe-eval, __mf crashes with EvalError: Code generation from strings disallowed for this context.

The upstream issue suggests this will not be fixed in @messageformat/core, and suggests switching to intl-messageformat.

• messageformat requires unsafe-eval in Content-Security-Policy messageformat/messageformat#180