This doesn't really matter, as we depend on bleach<5 due to changes in style handling. but https://github.com/mozilla/bleach/issues/698 says bleach is deprecated and we should come up with a path forward
I think the best bet here is to clean up CSP and remove the unsafe-* options that we're currently using. Hopefully we're not pulling in any third party libraries that need that.
This doesn't really matter, as we depend on bleach<5 due to changes in style handling. but https://github.com/mozilla/bleach/issues/698 says bleach is deprecated and we should come up with a path forward