[SahAssar]

You can also include a hash of the contents in the CSP, which plays well with caching.

[LegionMammal978]

True, a hash works as a good alternative. (Unless you're doing super weird stuff like generating inline scripts at runtime.)