Script tag automatically adds nonces to script blocks - should be used in combination with Struts' CSP Interceptor.