Merge pull request #2696 from canonical/WD-37396

fix: nonce lite-youtube bootstrap script so injected <style> passes CSP

Author: Skazitron

templates/base_index.html

@@ -70,7 +70,7 @@
             Must run before the deferred lite-youtube module upgrades the
             element.
           -->
-          <script>window.liteYouTubeNonce = "{{ csp_nonce }}";</script>
+          <script nonce="{{ csp_nonce }}">window.liteYouTubeNonce = {{ csp_nonce | tojson }};</script>
 
           {% block extra_metatags %}{% endblock %}