3 ms·Neatly bypassing CSP. Why 'unsafe-inline' is almost always a full-fledged XSS3 points by i_bo0om 8y ago