title: CSP errors with the Angular nvd3 package
body: <p>I'm using the <a href="http://krispo.github.io/angular-nvd3/#/" rel="nofollow">angular d3 package</a> to place charts into my app and am getting the error shown at the bottom:</p>
  
  <p>A couple things that did not yield results:</p>
  
  <ul>
  <li>Setting a nonce on the content security policy of the server response header as script-src 'self' nonce-nRfqpuKWNuYyUAFPTr6WVNZk9 and passing it in as nonce="nRfqpuKWNuYyUAFPTr6WVNZk9" on the script tag of the nvd3 javascript package import which I am hosting. See <a href="https://blog.mozilla.org/security/2014/10/04/csp-for-the-web-we-have/" rel="nofollow">here</a></li>
  <li>Setting a nonce on the content security policy of the header as style-src nonce-nRfqpuKWNuYyUAFPTr6WVNZk9 and passing it in to the associated nvd3 stylesheet import</li>
  <li>Including the ngCsp package and importing the angular-csp.css per the angular docs</li>
  </ul>
  
  <p>Any ideas on how to get around this issue?</p>
  
  <pre><code>nv.d3.min.js:3 Refused to apply inline style because it violates the
  &gt; following Content Security Policy directive: "style-src 'self'
  &gt; nonce-nRfqpuKWNuYyUAFPTr6WVNZk9". Either the 'unsafe-inline' keyword,
  &gt; a hash ('sha256-Sd940mhg11baB1cb1LWCO1WC3mgZyv2jlD9Z3wJqMoQ='), or a
  &gt; nonce ('nonce-...') is required to enable inline execution. (anonymous
  &gt; function)  
  &gt;@ nv.d3.min.js:3a.dom.write  
  &gt;@ nv.d3.min.js:3c 
  &gt;@ nv.d3.min.js:3(anonymous function)  
  &gt;@ nv.d3.min.js:6t  
  &gt;@ d3.min.js:1m 
  &gt;@ nv.d3.min.js:3(anonymous function)  
  &gt;@ d3.min.js:1
  </code></pre>