pub(crate) static NONCE_SOURCE_GRAMMAR: Lazy<Regex>
https://www.w3.org/TR/CSP/#grammardef-nonce-source