Livewire and unsafe-eval

[incoming-th]

Hi,

Livewire requires unsafe-eval to be set to true, which is something that will never happen due to security concerns.

Using the nonce is working when the page is loaded

@livewireScripts(['nonce' => csp_nonce('script')])

But then throws an error from Alpine:

Alpine Expression Error: Refused to evaluate a string as JavaScript because 'unsafe-eval' is not an allowed source of script in the following Content Security Policy directive: "script-src 'self' 'nonce-MDA4ZDlhZjZhOTUxYmZkMg=='

I understand this is not an issue related to bepsvpt/secure-headers and already added my comment here livewire/livewire#6113 , but just in case if anyone ran into this problem and found a workaround.