Version

3.0.3

Node and OS info

N/A

Steps to reproduce

From the docs:

Also, modern mode uses an inline script to avoid Safari 10 loading both bundles, so if you are using a strict CSP, you will need to explicitly allow the inline script

What is expected?

There would be a flag or config variable to not force modification of CSP, by removing the Safari workaround

What is actually happening?

If we use --modern, we are forced to modify the CSP. This is not always practical for large organisations with slower bureaucratic processes.