I've read your idea before and while I have absolutely no technical issues with it, I think it requires a lot more work from everyone involved. The only use for

I've read your idea before and while I have absolutely no technical issues with it, I think it requires a lot more work from everyone involved. The only use for inline scripts at the end of a webpage (right before the </body> tag) that I can think of are analytics/user-tracking scripts. Other than that, I don't see why the JS code couldn't be included in a .js file. And since JS code from .js files can load the analytics files (albeit in a different order than inline script tags), I think my (a) approach would be sufficient for the purpose of blocking XSS.