title: Content Security Policy allow inline style without unsafe-inline
body: <p>Using content security policy without style-src 'unsafe-inline' how do you allow styles like this?</p>
  
  <p><div class="snippet" data-lang="js" data-hide="false">
  <div class="snippet-code">
  <pre class="snippet-code-html lang-html prettyprint-override"><code>&lt;span style="font-size: 16px;"&gt;Hello&lt;/span&gt;</code></pre>
  </div>
  </div>
  </p>
  
  <p>I've tried adding a nonce to them and adding that nonce to the CSP header but that doesn't seem to work</p>
  
  <p><div class="snippet" data-lang="js" data-hide="false">
  <div class="snippet-code">
  <pre class="snippet-code-html lang-html prettyprint-override"><code>&lt;span style="font-size: 16px;" nonce="0611873de7e2db5985c289fdfa946caee2ae1860"&gt;Hello&lt;/span&gt;</code></pre>
  </div>
  </div>
  </p>
  
  <p><div class="snippet" data-lang="js" data-hide="false">
  <div class="snippet-code">
  <pre class="snippet-code-html lang-html prettyprint-override"><code>"style-src 'nonce-0611873de7e2db5985c289fdfa946caee2ae1860' 'self'"</code></pre>
  </div>
  </div>
  </p>
  
  <p>Is there any way to do this without adding the 'unsafe-inline' directive??</p>