CSP Headers / unsafe-inline vs nonce's

[sebadob]

I am currently evaluating Leptos for a bigger upcoming project.
I do have the prod ready template almost fully set up, before I can actually build some components and I guess, if it turns out nicely, I can provide this template back to the community, It builds up on the axum starter with a few more additions to make it prod ready.

The last step I am taking a look at now is the CSP settings.
I usually keep unsafe-inline for CSS for practical reasons, but for the rest I want to get rid of all unsafe stuff.

Usually, I do this with inserting nonces on the server side and set a proper CSP for each request to be able to set strict-dynamic and a nonce.

So, after all this talking:
Is there a way to get access to a custom index.html with out of order streaming, into which I could insert nonces in all places with a templating engine, or does leptos maybe even provide a way to insert nonces into all inline scripts it injects?

The last value I needed was wasm-unsafe-eval, which I guess is the normal way of working with wasm currently. Leptos is now my first attempt with a wasm framework.

[sebadob]

Just to answer my own question here, @gbj created an issue for this: #1334