CSP policy conflicts

Problem/Motivation

With a content security policy in place the editor does not work correctly unless unsafe-inline is specified

Steps to reproduce

Using CSP module or an apache config file create a CSP policy that doesn't specifyy unsafe-inline for style-src and style-src-attr

Proposed resolution

Remaining tasks

User interface changes

API changes

Data model changes