In order to implement Content-Security-Policy, the inlined style, event handlers, and scripts all have to go. This commit completes this work.
Additionally use filePath instead of absPath, and fileName instead of filename.