title: In CSP, what's unsafe about 'unsafe-inline'?
body: <p>Why is 'unsafe-inline' unsafe in a Content Security Policy?</p>
  
  <p>What's wrong with inline scripts? is it just unsafe comparing to providing a hash or a nonce? or is there something I'm missing about embedding inline scripts instead of remote scripts?</p>