Don't use unsafe inline at all; rather put all js
and css
into separate files, then use script and style src as self.
If you need any external css
or js
, then add these links to your CSP. It's safer. Also avoid putting JavaScript like onClick
and such in your HTML code. Just put an ID and do it in an external js
.