="lead">Except for one very specific case, you should avoid using the <code>unsafe-inline</code> keyword in your CSP policy. As you might guess it is generally <em>unsafe</em> to use <code>unsafe-inline</code>.</p>
<p>The <code>unsafe-inline</code> keyword annuls most of the security benefits that <code>Content-Security-Policy</code> provide. </p>
<p>Let's imagine that you have an app that simply output's a name from the query string variable <code>name</code>, eg:
<code>Hello #url.name#</code>
<p>When you 