title: Chrome Extension - Content Security Policy - executing inline code
body: <p>I am using an external JavaScript lib in my chrome extension.
  I has inline execution, so I get following kind of error</p>
  
  <p>(The error I get on console)</p>
  
  <blockquote>
    <p>Refused to execute JavaScript URL because it violates the following
    Content Security Policy directive: "script-src 'self'
    chrome-extension://". Either the 'unsafe-inline' keyword, a hash
    ('sha256-...'), or a nonce ('nonce-...') is required to enable inline
    execution.</p>
  </blockquote>
  
  <p>The error message clearly says there is a work-around possible.</p>
  
  <p><a href="https://developer.chrome.com/extensions/contentSecurityPolicy#relaxing-inline-script" rel="noreferrer">Chrome-Content Security Policy</a> says not possible. Many related question cited this link.</p>
  
  <p><a href="https://crosswalk-project.org/#documentation/manifest/content_security_policy" rel="noreferrer">Blog</a> This blogger says it is possible, but probably this is applicable to only older chrome extension.</p>
  
  <p>Any work around possible?</p>
  
  <p>PS: don't wanna/can't change the entire library I am using.</p>
  
  <p>EDIT: how to use hash or nonce to enable inline execution.</p>