Hi, I've created a subclass of ContentSecurityPolicyMiddleware and an accompanying template context processor so I can do:
<script type="text/javascript" nonce="{{ csp_nonce }}">
</script>
Is there any interest in this? If so I can make a PR.
Thanks!