CSP script-src includes "unsafe-inline"

Summary

A security researcher pointed out that our Content Security Policy included the unsafe-eval keyword in the script-src directive.

I pointed out some low level issue in CSP policy. and great fix by legalrobot team.