A hash-based CSP has no room for a syntax highlighter

My Content Security Policy allows scripts by exact hash and nothing else. That works right up until a Markdown plugin decides to colour your code with inline styles, and then you find out what the policy actually costs.