Make component work with Content Security Policy by adding nonce attribute

[dnvgabken]

This component uses style attributes, which may violate CSP if you disallow inline styling.

Suggest adding a nonce attribute to ReflexElement so this can be injected, and style attributes work.

[dnvgabken]

It seems like react already does it properly for you, so this is not necessary.