fix inline CSS not working (#1404)

* fix inline CSS not working

* fix inline JS not executing

controllers/middlewares/middlewares.go

@@ -64,7 +64,7 @@ func ScopesRequired(scopes ...string) gin.HandlerFunc {
 // CSP set Content Security Policy http header
 func CSP() gin.HandlerFunc {
 	return func(c *gin.Context) {
-		c.Header("Content-Security-Policy", "default-src 'self'; img-src *; media-src *; script-src 'self'")
+		c.Header("Content-Security-Policy", "default-src 'self'; img-src *; media-src *; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'")
 		c.Next()
 	}
 }