do not ignore csp even for disposition=inline

src/pretix/control/views/event.py

@@ -746,7 +746,6 @@ class InvoicePreview(EventPermissionRequiredMixin, View):
         if settings.DEBUG:
             # attachment is more secure as we're dealing with user-generated stuff here, but inline is much more convenient during debugging
             resp['Content-Disposition'] = 'inline; filename="{}"'.format(fname)
-            resp._csp_ignore = True
         else:
             resp['Content-Disposition'] = 'attachment; filename="{}"'.format(fname)
         return resp

src/pretix/control/views/global_settings.py

@@ -300,5 +300,4 @@ class SysReportView(AdministratorPermissionRequiredMixin, TemplateView):
             resp = HttpResponse(data)
             resp['Content-Type'] = mime
             resp['Content-Disposition'] = 'inline; filename="{}"'.format(name)
-            resp._csp_ignore = True
             return resp