CSP Unsafe-inline and nonce deployment at Dropbox
blogs.dropbox.com