CSS : Content Security Policy allow inline style without unsafe-inline