Re: Content Security Policy without unsafe-inline

[Lance Java]

Chris, I was beginning to think along the same lines.

A configuration symbol (boolean) to choose either an inline script or an
extra (page specific) js import using the token + time to live strategy
sounds like a good solution to me.