I'm trying to use struts2-jquery-plugin but i can't . The reason is my content-secure-policy header against Cross Site Scripting (XSS) attacks... How can i solve it without use 'unsafe-inline' mode in ...

Dutch security consultant Sijmen Ruwhof has discovered a cross-site scripting (XSS) vulnerability in the jQuery Validation Plugin's CAPTCHA demo script.

If you look at the source of the front page, you see a div with ID tabulator-controls. There you'll see a bunch of buttons defined. Then down at the bottom of the page, you see the jQuery controls ...