Template renderer and CSP

[jbudz]

What problem does this feature solve?

When context with state is provided to the template renderer an inline script is created. It may be useful to provide a nonce that gets attached to the script tag so an unsafe-inline CSP doesn't have to be enabled.

What does the proposed API look like?

renderer.renderToString({
  state: {},
  nonce: ''
})

[yyx990803]

Closed via #8047