Re: Content Security Policy without unsafe-inline

[Lance Java]

Another consideration with the token approach is clustering. Either a
sticky session or a distributed cache are required.