Remove inline javascript

This MR removes inline javascript in accordance with Content Security Policy

mentioned in commit 2145acb4

merged