pub const UNSAFE_INLINE: &str = "'unsafe-inline'";
'unsafe-inline': allows inline <style>/<script> and style= attributes. Avoid it for scripts.
'unsafe-inline'
<style>
<script>
style=
assert_eq!(ocre::security::UNSAFE_INLINE, "'unsafe-inline'");