Description: Allows or blocks inline JS (unsafe-inline) in CSP (Pro).
How it works: builder_allow_inline_js controls whether inline scripts are permitted; disallowing improves security but may break some themes/plugins.
How to access / configure:
- WP Admin → AegisShield → Security Headers → CSP Builder.
- Toggle “Allow inline JS”.
- Save and test site functionality.
Recommended setting: Prefer OFF; only enable if required and plan to migrate to nonces/hashes later.