chore: get rid of unsafe-inline

Author: Taranveer Bains

server/index.mjs

@@ -135,13 +135,13 @@ app.use(
 					'https://cdn.syndication.twimg.com',
 					(req, res) => `'nonce-${res.locals.cspNonce}'`,
 				],
-				'script-src-attr': [
-					"'unsafe-inline'",
-					// TODO: figure out how to make the nonce work instead of
-					// unsafe-inline. I tried adding a nonce attribute where we're using
-					// inline attributes, but that didn't work. I still got that it
-					// violated the CSP.
-				],
+				// 'script-src-attr': [
+				// 	"'unsafe-inline'",
+				// 	// TODO: figure out how to make the nonce work instead of
+				// 	// unsafe-inline. I tried adding a nonce attribute where we're using
+				// 	// inline attributes, but that didn't work. I still got that it
+				// 	// violated the CSP.
+				// ],
 				'upgrade-insecure-requests': null,
 			},
 		},