Snow 2's CSP breaks Snow's inline scripts

[mmndaniel]

var d = document.createElement('div');
document.body.appendChild(d);
d.innerHTML =  `<iframe
	srcdoc="<iframe></iframe>"</iframe>`;
frames[0][0].alert(1);

See console: Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self' blob:". .. etc. The CSP doesn't have a nonce/hash, so the inline scripts created by

snow/src/html.js

Line 9 in 77d1378

const getDocumentCurrentScriptHelper = `

and

snow/src/html.js

Line 14 in 77d1378

function makeStringHook(asFrame, asHtml, arg) {

won't execute.

[weizman]

Yea that's my bad... fair point.
I'll get to it 🙏

[weizman]

Snow 2 was a mistake #133