Re: Content Security Policy without unsafe-inline

[Lance Java]

Agreed that the only reasonable solution is a token + ttl. I'm not
convinced it's a good idea though.