content="script-src 'self' 'unsafe-inline' 'unsafe-eval'" <% } else { %> content="script-src 'self' 'unsafe-inline'" <% } %> />