Even tighter CSP

Will this fix it?

Remove inline script and style from demo

Okay I'm dumb

Ugh

static/katex-init.js

@@ -0,0 +1,8 @@
+document.addEventListener("DOMContentLoaded", function () {
+	renderMathInElement(document.body, {
+		delimiters: [
+			{ left: "$$", right: "$$", display: true },
+			{ left: "$", right: "$", display: false },
+		],
+	});
+});