[Inf-IT DAVcl] Content Security Policy

When enabling Content Security Policy on the webserver that serves InfCloud, unsafe-inline has to be enabled as InfCloud is including some js and some css in the html.

Do you think it could be possible to remove this requirement, hence making InfCloud mose secure and reliable?

unsafe-inline and unsafe-eval are obviously a bad habits and they could be easily avoided by moving css and js code un css and js files.

More informations on demande if you need some.