[bug959270v2] - added more sources to the policy, fixed indentation, added 'unsafe-inline' to script policy