Expose script nonce for wrapper js obj

src/Ui/media/Wrapper.coffee

@@ -441,9 +441,12 @@ class Wrapper
 			@log "Setting title to", window.document.title
 
 	onWrapperLoad: =>
+		@script_nonce = window.script_nonce
+		@wrapper_key = window.wrapper_key
 		# Cleanup secret variables
 		delete window.wrapper
 		delete window.wrapper_key
+		delete window.script_nonce
 		$("#script_init").remove()
 
 	# Send message to innerframe

src/Ui/template/wrapper.html

@@ -75,6 +75,7 @@ file_inner_path = "{file_inner_path}"
 permissions = {permissions}
 show_loadingscreen = {show_loadingscreen}
 server_url = '{server_url}'
+script_nonce = '{script_nonce}'
 
 if (typeof WebSocket === "undefined") {
 	tag = document.createElement('div');