CSP nonce issue?

[adamgreg]

Hi @marvinhagemeister,

I just saw #2323 , and I'm not sure it's right for the case where CSP is enabled.

A couple of lines above, where the nonce variable is created, it is missing the closing quote. Previously this was then provided within the bodyHtml string itself, but now it doesn't look like it will be.

fresh/src/server/rendering/fresh_tags.tsx

Line 172 in 8187189

const nonce = renderState.csp ? ` nonce="${renderState.getNonce()}` : "";