Add a nonce to each script and style tags, and set those nonces in CSP header.