add unsafe-inline to CSP style rule