CSP with no 'unsafe-inline'

Test page!