How do I setup SFTPGo so the scripts have nonces?

[cosmin-ionut]

I need to setup the Content Security Policy for SFTPGo. Some of the scripts keep changing after a page refresh, so I can not use SHA hashes. The other solution would be Nonces. I see that there are references in the source code for them, for example:

		<script {{- if .CSPNonce}} nonce="{{.CSPNonce}}"{{- end}} src="{{.StaticURL}}/assets/js/scripts.bundle.js"></script>
		<script {{- if .CSPNonce}} nonce="{{.CSPNonce}}"{{- end}} src="{{.StaticURL}}/vendor/i18next/i18next.min.js"></script>
		<script {{- if .CSPNonce}} nonce="{{.CSPNonce}}"{{- end}} src="{{.StaticURL}}/vendor/i18next/jquery-i18next.min.js"></script>
		<script {{- if .CSPNonce}} nonce="{{.CSPNonce}}"{{- end}} src="{{.StaticURL}}/vendor/i18next/i18nextBrowserLanguageDetector.min.js"></script>
		<script {{- if .CSPNonce}} nonce="{{.CSPNonce}}"{{- end}} src="{{.StaticURL}}/vendor/i18next/i18nextChainedBackend.min.js"></script>
        <script {{- if .CSPNonce}} nonce="{{.CSPNonce}}"{{- end}} src="{{.StaticURL}}/vendor/i18next/i18nextLocalStorageBackend.min.js"></script>
		<script {{- if .CSPNonce}} nonce="{{.CSPNonce}}"{{- end}} src="{{.StaticURL}}/vendor/i18next/i18nextHttpBackend.min.js"></script>

but still, after I have installed the app, it seems that the nonces are not generated:

		<script src="/static/assets/plugins/global/plugins.bundle.js"></script>
		<script src="/static/assets/js/scripts.bundle.js"></script>
		<script src="/static/vendor/i18next/i18next.min.js"></script>
		<script src="/static/vendor/i18next/jquery-i18next.min.js"></script>
		<script src="/static/vendor/i18next/i18nextBrowserLanguageDetector.min.js"></script>
		<script src="/static/vendor/i18next/i18nextChainedBackend.min.js"></script>
        <script src="/static/vendor/i18next/i18nextLocalStorageBackend.min.js"></script>
		<script src="/static/vendor/i18next/i18nextHttpBackend.min.js"></script>

What do I need to configure to fix this?

[cosmin-ionut]

Fixed it with the solution here #1779 , but I still think Content Security Policy config should be properly documented here https://docs.sftpgo.com/enterprise/