G github.com Accessing the nonce from JavaScript, makes all nonce based CSPs strict-dynamic 1 points bandamo 4 years ago 1 comments