CSP: a nonce with 'strict-dynamic'

The tag under web.dev's strict policy with a fixed nonce, which both lines carry because 'strict-dynamic' ignores host sources.

How we test

Every product on this page went through the same week on the same bench, and what we say about it is what its reviewer published.

What survives the week gets shelf space. What does not goes back to the maker with the numbers.