CSP prevents inline and embedded styles

The CSP is too strict.

```
<p style="background-color: aqua;">...
```

```
<!DOCTYPE html>
<html>
	<head>
		<style type="text/css" media="screen">
			body {
				background-color: red;
			}
...
```

Both the above in an HTML document returned by the sandbox cause CSP errors in concole and are not applied.