ed to.
	<br>
	Finally make sure you also patch your XSS vulnerabilities in your app code by properly encoding variables before outputting them.
</blockquote>
<h2>What should you use instead of unsafe-inline?</h2>
<p>When you want to <a href="/examples/allow-inline-script/">allow inline scripts or styles</a> on a page that uses CSP, there two much better options: <a href="/nonce/">nonce</a> or <a href="/hash/">hash</a>.</p>
<h2>What else does unsafe-inline allow?</h2>
<p>Besides just allowing inline <code>sc