[JoshTriplett]

Ah. I hadn't found that in Mozilla's CSP documentation. Thanks.

[Scott_Helme_]

I'm going to be doing some blogs in the coming weeks on how to use hashes and nonces to whitelist inline script. Hopefully, this will make introducing CSP a little easier. I also have some tools in the making that will help in this regard too.