Does WordPress 4.8 plan on being completely compatible with strict Content-Security-Policy headers? Currently I have to enable unsafe-inline and unsafe-eval in the script-src part of my CSP or else the Customize feature will not work.