title: Is there anyway to configure content security policy to allow any third party scripts but disallow inline/eval
body: <p>Is there anyway to configure content security policy to allow any third party scripts but disallow inline/eval?</p>
  <p>I have some third party marketing/analytics scripts that has to be added and removed regularly. I would like to secure the page vs inline and eval style xss through user input. What would my CSP look like for this usecase? Thanks.</p>