CSP disallows the use of onclick
CSP disallows the use of inline script.
CSP disallows the use of inline styles in native HTML (adding style via JS is fine)
All Code needs to be in a JS file.
And use addEventListener or similar to add click events