Proposal: CSP 'unsafe-inline' Compliance

When trying to enforce content-security-policy in all environments, I ran into issues with this plugin. I externalized the values and populated the global context with the values so the result is identical.

The tests pass, but obviously these tests don't cover all of the new complexity with the javascript interaction. I just wanted to run this by you to see your thoughts.