I am trying to use the Service Management Widget (Contact Us button) on our websites but our content-security-policy (CSP) is blocking it. The only way to make this work is with setting the CSP with:
style-src 'self' 'unsafe-inline';
Is there another option to make this work? We will get flagged by security/pen tests if I were to set unsafe-inline.
Widget documentation:
https://support.atlassian.com/jira-service-management-cloud/docs/embed-a-widget-onto-a-web-page/