Disable eval() since we never use it

preload.js

@@ -19,8 +19,10 @@ window.config.localeMessages = ipc.sendSync('locale-data');
 
 window.setBadgeCount = count => ipc.send('set-badge-count', count);
 
-// We never do this in our code, so we'll prevent it everywhere
+// We never do these in our code, so we'll prevent it everywhere
 window.open = () => null;
+// eslint-disable-next-line no-eval, no-multi-assign
+window.eval = global.eval = () => null;
 
 window.drawAttention = () => {
   console.log('draw attention');