ript</code> tags, <code>unsafe-inline</code> also allows all of the JavaScript event handlers to execute, for example code like this:</p>
<pre>&lt;button onClick="doSomething();"&gt;Do It&lt;/button&gt;</pre>
<p>Another way to allow such unsafe inline JavaScript code is with the <a href="/unsafe-hashes/">unsafe-hashes</a> source list keyword. While it is also considered <em>unsafe</em>, it better to use <code>unsafe-hashes</code> than it is to use <code>unsafe-inline</code>.</p> 
<h2>When is it ok to use un