Script src unsafe inline