Thnx, I'll have a deeper look at them. It funny that without a CSP we got 93% on best practices. With a CSP we get 87% because of the inline stuff.