Security content security policy suggestions

i am looking into adding some content security policy on a wordpress site i am running to play with it a bit

for example this line

Code:

add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'

would only allow content from self and i believe allow the inline css and js
i have not tried it yet, but what is you opinion in general about adding csp for better security?

---