OTP field doesn't render properly with style CSP configured to self

[vriviere-odin]

Problem:

Django-otp seems to add some inline styling to correctly render the OTP field in /admin. If CSP are configured to block any inline style, the follow errors is returned and the field doesn't render as it should:

Refused to apply inline style because it violates the following Content Security Policy directive: "style-src 'self'". Either the 'unsafe-inline' keyword, a hash ('sha256-....='), or a nonce ('nonce-...') is required to enable inline execution.

Same happen once logged in, when clicking the qrcode link, there is some inline style:

<div style="text-align: center;">
  <p id="qrcode">
    <img width="200" height="200"
         style="background-color: white"
         ...

Solution:

Add a hash or make the inline script safe (if it doesn't change often) or use a style.css file and import it instead.