I have been trying to get rid of the unsafe-inline from the CSP style-src headers as it is vulnerable. While removing this, I am getting below errors in jQuery execution in chrome: Refused to apply ...

Important note: always put JS in body tags preferably just above body closing tag It'll not work if you put in header. If you put it on header it'll try to render html elements before they are loaded ...