Add script to check CSP nonce-source support