[TheCycoONE]

Neither of those work for the inline event handlers proposed by this article. You need unsafe-inline or unsafe-hashes.