unsafe-inline and unsafe-eval parsing added of script-src and style-src. Only these two directives now accept it