. Style-src 'unsafe-inline' is allowed by Element's CSP; script-src is not, so this is HTML+CSS only — no JS needed (a plain stays in the DOM, React never touches it). To re-apply after an Element upgrade: 1. SSH to prod, backup index.html as index.html.bak-pre-w31t8- 2. Inject the markers + this block right after the