Content Security Policy (CSP) implemented unsafely

[digitalgregg]

My site using lot inline JS ans CSS. When I'm using unsafe-inline , Mozilla showing (CSP) implemented unsafely. How can keep score on Mozilla using unsafe-inline ?

[carlin-q-scott]

This article explains your issue pretty thoroughly: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/script-src

Basically you need to stop using inline scripts and styles, or use nonces.