> > > > Any thoughts on my concerns with making inline CSS mandatory (especially > > from the CSP angle)? > > CSP 1.1 supports securing inline style and script with nonces and/or > hashes. > > OK, since the latest proposals keep the URLs outside the style, modifying the content image can keep the same style, assuming layout is identical. So these inline-style are not more likely to change than any other inline-styles and the authoring complexity is identical to other inline styles.
Still - I'm not sure such a solution is author friendly.
