diff --git a/src/wp-admin/admin-header.php b/src/wp-admin/admin-header.php
index 92fbd3a4a2f79..8d935bb2b86e7 100644
--- a/src/wp-admin/admin-header.php
+++ b/src/wp-admin/admin-header.php
@@ -100,18 +100,45 @@
 wp_enqueue_script( 'svg-painter' );
 
 $admin_body_class = preg_replace( '/[^a-z0-9_-]+/i', '-', $hook_suffix );
-?>
-<script>
-addLoadEvent = function(func){if(typeof jQuery!=='undefined')jQuery(function(){func();});else if(typeof wpOnload!=='function'){wpOnload=func;}else{var oldonload=wpOnload;wpOnload=function(){oldonload();func();}}};
-var ajaxurl = '<?php echo esc_js( admin_url( 'admin-ajax.php', 'relative' ) ); ?>',
-	pagenow = '<?php echo esc_js( $current_screen->id ); ?>',
-	typenow = '<?php echo esc_js( $current_screen->post_type ); ?>',
-	adminpage = '<?php echo esc_js( $admin_body_class ); ?>',
-	thousandsSeparator = '<?php echo esc_js( $wp_locale->number_format['thousands_sep'] ); ?>',
-	decimalPoint = '<?php echo esc_js( $wp_locale->number_format['decimal_point'] ); ?>',
-	isRtl = <?php echo (int) is_rtl(); ?>;
-</script>
-<?php
+
+// Print the global admin inline scripts through the script tag API so the
+// `wp_inline_script_attributes` filter (e.g. a CSP nonce) applies.
+wp_print_inline_script_tag(
+	<<<'JS'
+	function addLoadEvent(func) {
+		if (typeof jQuery !== 'undefined') {
+			jQuery(function () {
+				func();
+			});
+		} else if (typeof wpOnload !== 'function') {
+			window.wpOnload = func;
+		} else {
+			const oldonload = wpOnload;
+			window.wpOnload = function () {
+				oldonload();
+				func();
+			}
+		}
+	}
+	JS
+);
+wp_print_inline_script_tag(
+	sprintf(
+		'Object.assign( window, %s );',
+		wp_json_encode(
+			array(
+				'ajaxurl'            => admin_url( 'admin-ajax.php', 'relative' ),
+				'pagenow'            => $current_screen->id,
+				'typenow'            => $current_screen->post_type,
+				'adminpage'          => $admin_body_class,
+				'thousandsSeparator' => $wp_locale->number_format['thousands_sep'],
+				'decimalPoint'       => $wp_locale->number_format['decimal_point'],
+				'isRtl'              => (int) is_rtl(),
+			),
+			0 | JSON_HEX_TAG | JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_LINE_TERMINATORS
+		)
+	)
+);
 
 /**
  * Fires when enqueuing scripts for all admin pages.
@@ -253,11 +280,13 @@
 $admin_body_classes = ltrim( $admin_body_classes . ' ' . $admin_body_class );
 ?>
 <body class="wp-admin wp-core-ui no-js <?php echo esc_attr( $admin_body_classes ); ?>">
-<script>
-	document.body.className = document.body.className.replace('no-js','js');
-</script>
-
 <?php
+wp_print_inline_script_tag(
+	<<<'JS'
+	document.body.className = document.body.className.replace( 'no-js', 'js' );
+	JS
+);
+
 // Make sure the customize body classes are correct as early as possible.
 if ( current_user_can( 'customize' ) ) {
 	wp_customize_support_script();
diff --git a/src/wp-admin/includes/media.php b/src/wp-admin/includes/media.php
index babc0e85c33ac..176f78dff8225 100644
--- a/src/wp-admin/includes/media.php
+++ b/src/wp-admin/includes/media.php
@@ -272,12 +272,12 @@ function _cleanup_image_add_caption( $matches ) {
  * @return never
  */
 function media_send_to_editor( $html ) {
-	?>
-	<script>
-	var win = window.dialogArguments || opener || parent || top;
-	win.send_to_editor( <?php echo wp_json_encode( $html, JSON_HEX_TAG | JSON_UNESCAPED_SLASHES ); ?> );
-	</script>
-	<?php
+	wp_print_inline_script_tag(
+		sprintf(
+			'( window.dialogArguments || opener || parent || top ).send_to_editor( %s );',
+			wp_json_encode( $html, JSON_HEX_TAG | JSON_UNESCAPED_SLASHES )
+		)
+	);
 	exit;
 }
 
@@ -567,13 +567,39 @@ function wp_iframe( $content_func, ...$args ) {
 		wp_enqueue_style( 'deprecated-media' );
 	}
 
-	?>
-	<script>
-	addLoadEvent = function(func){if(typeof jQuery!=='undefined')jQuery(function(){func();});else if(typeof wpOnload!=='function'){wpOnload=func;}else{var oldonload=wpOnload;wpOnload=function(){oldonload();func();}}};
-	var ajaxurl = '<?php echo esc_js( admin_url( 'admin-ajax.php', 'relative' ) ); ?>', pagenow = 'media-upload-popup', adminpage = 'media-upload-popup',
-	isRtl = <?php echo (int) is_rtl(); ?>;
-	</script>
-	<?php
+	wp_print_inline_script_tag(
+		<<<'JS'
+		function addLoadEvent(func) {
+			if (typeof jQuery !== 'undefined') {
+				jQuery(function () {
+					func();
+				});
+			} else if (typeof wpOnload !== 'function') {
+				window.wpOnload = func;
+			} else {
+				const oldonload = wpOnload;
+				window.wpOnload = function () {
+					oldonload();
+					func();
+				}
+			}
+		}
+		JS
+	);
+	wp_print_inline_script_tag(
+		sprintf(
+			'Object.assign( window, %s );',
+			wp_json_encode(
+				array(
+					'ajaxurl'   => admin_url( 'admin-ajax.php', 'relative' ),
+					'pagenow'   => 'media-upload-popup',
+					'adminpage' => 'media-upload-popup',
+					'isRtl'     => (int) is_rtl(),
+				),
+				0 | JSON_HEX_TAG | JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_LINE_TERMINATORS
+			)
+		)
+	);
 	/** This action is documented in wp-admin/admin-header.php */
 	do_action( 'admin_enqueue_scripts', 'media-upload-popup' );
 
@@ -630,10 +656,12 @@ function wp_iframe( $content_func, ...$args ) {
 	?>
 	</head>
 	<body<?php echo $body_id_attr; ?> class="wp-core-ui no-js <?php echo 'admin-color-' . sanitize_html_class( get_user_option( 'admin_color' ), 'modern' ); ?>">
-	<script>
-	document.body.className = document.body.className.replace('no-js', 'js');
-	</script>
 	<?php
+	wp_print_inline_script_tag(
+		<<<'JS'
+		document.body.className = document.body.className.replace( 'no-js', 'js' );
+		JS
+	);
 
 	call_user_func_array( $content_func, $args );
 
@@ -641,7 +669,15 @@ function wp_iframe( $content_func, ...$args ) {
 	do_action( 'admin_print_footer_scripts' );
 
 	?>
-	<script>if(typeof wpOnload==='function')wpOnload();</script>
+	<?php
+	wp_print_inline_script_tag(
+		<<<'JS'
+		if( typeof wpOnload === 'function' ) {
+			wpOnload();
+		}
+		JS
+	);
+	?>
 	</body>
 	</html>
 	<?php
@@ -838,12 +874,11 @@ function media_upload_form_handler() {
 	}
 
 	if ( isset( $_POST['insert-gallery'] ) || isset( $_POST['update-gallery'] ) ) {
-		?>
-		<script>
-		var win = window.dialogArguments || opener || parent || top;
-		win.tb_remove();
-		</script>
-		<?php
+		wp_print_inline_script_tag(
+			<<<'JS'
+			( window.dialogArguments || opener || parent || top ).tb_remove();
+			JS
+		);
 
 		exit;
 	}
@@ -2099,7 +2134,9 @@ function get_compat_media_markup( $attachment_id, $args = null ) {
 function media_upload_header() {
 	$post_id = isset( $_REQUEST['post_id'] ) ? (int) $_REQUEST['post_id'] : 0;
 
-	echo '<script>post_id = ' . $post_id . ';</script>';
+	wp_print_inline_script_tag(
+		sprintf( 'var post_id = %s;', wp_json_encode( $post_id ) )
+	);
 
 	if ( empty( $_GET['chromeless'] ) ) {
 		echo '<div id="media-upload-header">';
@@ -2248,7 +2285,6 @@ function media_upload_form( $errors = null ) {
 	$plupload_init = apply_filters( 'plupload_init', $plupload_init );
 
 	?>
-	<script>
 	<?php
 	// Verify size is an int. If not return default value.
 	$large_size_h = absint( get_option( 'large_size_h' ) );
@@ -2263,10 +2299,20 @@ function media_upload_form( $errors = null ) {
 		$large_size_w = 1024;
 	}
 
+	wp_print_inline_script_tag(
+		sprintf(
+			'Object.assign( window, %s );',
+			wp_json_encode(
+				array(
+					'resize_height'  => $large_size_h,
+					'resize_width'   => $large_size_w,
+					'wpUploaderInit' => $plupload_init,
+				),
+				0 | JSON_HEX_TAG | JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_LINE_TERMINATORS
+			)
+		)
+	);
 	?>
-	var resize_height = <?php echo $large_size_h; ?>, resize_width = <?php echo $large_size_w; ?>,
-	wpUploaderInit = <?php echo wp_json_encode( $plupload_init, JSON_HEX_TAG | JSON_UNESCAPED_SLASHES ); ?>;
-	</script>
 
 	<div id="plupload-upload-ui" class="hide-if-no-js">
 	<?php
@@ -2390,15 +2436,19 @@ function media_upload_type_form( $type = 'file', $errors = null, $id = null ) {
 
 	<?php media_upload_form( $errors ); ?>
 
-	<script>
-	jQuery(function($){
-		var preloaded = $(".media-item.preloaded");
-		if ( preloaded.length > 0 ) {
-			preloaded.each(function(){prepareMediaItem({id:this.id.replace(/[^0-9]/g, '')},'');});
-		}
-		updateMediaForm();
-	});
-	</script>
+	<?php
+	wp_print_inline_script_tag(
+		<<<'JS'
+		jQuery(function($){
+			var preloaded = $(".media-item.preloaded");
+			if ( preloaded.length > 0 ) {
+				preloaded.each(function(){prepareMediaItem({id:this.id.replace(/[^0-9]/g, '')},'');});
+			}
+			updateMediaForm();
+		});
+		JS
+	);
+	?>
 	<div id="media-items">
 	<?php
 
@@ -2596,16 +2646,18 @@ function media_upload_gallery_form( $errors ) {
 		$form_class .= ' html-uploader';
 	}
 
+	wp_print_inline_script_tag(
+		<<<'JS'
+		jQuery(function($){
+			var preloaded = $(".media-item.preloaded");
+			if ( preloaded.length > 0 ) {
+				preloaded.each(function(){prepareMediaItem({id:this.id.replace(/[^0-9]/g, '')},'');});
+				updateMediaForm();
+			}
+		});
+		JS
+	);
 	?>
-	<script>
-	jQuery(function($){
-		var preloaded = $(".media-item.preloaded");
-		if ( preloaded.length > 0 ) {
-			preloaded.each(function(){prepareMediaItem({id:this.id.replace(/[^0-9]/g, '')},'');});
-			updateMediaForm();
-		}
-	});
-	</script>
 	<div id="sort-buttons" class="hide-if-no-js">
 	<span>
 		<?php _e( 'All Tabs:' ); ?>
@@ -2925,15 +2977,19 @@ function media_upload_library_form( $errors ) {
 	<form enctype="multipart/form-data" method="post" action="<?php echo esc_url( $form_action_url ); ?>" class="<?php echo $form_class; ?>" id="library-form">
 	<?php wp_nonce_field( 'media-form' ); ?>
 
-	<script>
-	jQuery(function($){
-		var preloaded = $(".media-item.preloaded");
-		if ( preloaded.length > 0 ) {
-			preloaded.each(function(){prepareMediaItem({id:this.id.replace(/[^0-9]/g, '')},'');});
-			updateMediaForm();
-		}
-	});
-	</script>
+	<?php
+	wp_print_inline_script_tag(
+		<<<'JS'
+		jQuery(function($){
+			var preloaded = $(".media-item.preloaded");
+			if ( preloaded.length > 0 ) {
+				preloaded.each(function(){prepareMediaItem({id:this.id.replace(/[^0-9]/g, '')},'');});
+				updateMediaForm();
+			}
+		});
+		JS
+	);
+	?>
 
 	<div id="media-items">
 		<?php add_filter( 'attachment_fields_to_edit', 'media_post_single_attachment_fields_to_edit', 10, 2 ); ?>
