Re: Content Security Policy without unsafe-inline

[Lance Java]

IMHO all javascript functions should be defined in static, cacheable js
files.
The inline scripts are just for passing dynamic arguments to functions
defined in static scripts.