diff --git a/components/upload/upload-btn.component.html b/components/upload/upload-btn.component.html
index 072ff00249..eae88607dd 100644
--- a/components/upload/upload-btn.component.html
+++ b/components/upload/upload-btn.component.html
@@ -1,3 +1,8 @@
+<!--
+  We explicitly bind `style.display` to avoid using an inline style
+  attribute property (which is not allowed when CSP `unsafe-inline`
+  is not specified).
+-->
 <input
   type="file"
   #file
@@ -6,6 +11,6 @@
   [attr.directory]="options.directory ? 'directory' : null"
   [attr.webkitdirectory]="options.directory ? 'webkitdirectory' : null"
   [multiple]="options.multiple"
-  style="display: none"
+  [style.display]="'none'"
 />
 <ng-content></ng-content>