Who have good Content Security Policy config for una?
It's still highly recommended to instead focus on removing all inline content resources though.