fix: csp nonce in script-src-elem, style-src-attr and style-src-elem when using unsafe-inline

fix: csp nonce in script-src-elem, style-src-attr and style-src-elem when using unsafe-inline #21910