CSP affects inline scripts as well. They are actually disallowed by default and must be explicitly whitelisted.