Add exception for element (#1080)

* Remove nonces

* Add custom csp for mirador viewer

* Add additional connect-src and remove unsafe inline

* Add back unsafe inline for blacklight range limit

* rubocop

* Add exceptions for style

* Add exception

config/initializers/content_security_policy.rb

@@ -16,7 +16,7 @@
       policy.script_src_elem  :self, :unsafe_inline, 'siteimproveanalytics.com www.googletagmanager.com'
       policy.style_src :self, :unsafe_inline
       policy.style_src_attr :self, :unsafe_inline
-      policy.style_src_elem :self, "#{ENV['IIIF_IMAGE_BASE_URL']}/"
+      policy.style_src_elem :self, :unsafe_inline, "#{ENV['IIIF_IMAGE_BASE_URL']}/"
       policy.connect_src :self, "banner.library.yale.edu www.google-analytics.com region1.google-analytics.com #{ENV['IIIF_IMAGE_BASE_URL']}/"
 
       # Specify URI for violation reports