Only if you have specified Content-Security-Policy headers in your response, without also specifying &quot;unsafe-inline&quot;: <a href="http:&#x2F;&#x2F;www.html5rocks.com&#x2F;en&#x2F;tutorials&#x2F;security&#x2F;content-security-policy&#x2F;" rel="nofollow">http:&#x2F;&#x2F;www.html5rocks.com&#x2F;en&#x2F;tutorials&#x2F;security&#x2F;content-secu...</a>