Include unsafe-inline in example policy