More CSP fixes
- Be consistent on how we call javascript and css files, always use a
nonce even when not really needed.
- Drop all the inline style="" in favor of CSS class and ID and sometime
with a little JS magic
- Remove all the href="javascrip:void(0)"
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr></pingou@pingoured.fr>