Strict Content Security Policy (CSP) not possible due inline CSS

[huubl]

What problem does this address?

Right now it's very hard, nearly impossible, to add a strict Content Security Policy (CSP) when inline styles (style="..." attributes) are used (https://content-security-policy.com/examples/allow-inline-style/).

Besides this, there are other arguments for not using style attributes:

Specificity
Inline styles have the highest specificity and only !important rule can override this.

Principle of separation of content from presentation
See this issue: Move away from inline styles

What is your proposed solution?

Moving all CSS from style attributes to a <style> element or a CSS file. For example:

Change:
<p style="font-style:normal;font-weight:700">Lorum ipsum</p>

To something like this:
<p class="has-normal-font-style has-700-font-weight">Lorum ipsum</p>

[ramonjd]

Related:

• Additional Block CSS: Selector impossible if attribute is not on block-level but on element-level (as in BEM) #49415
• Explore options to add back semantic classnames to block wrappers  #38719