public Map<String, Map<String, String>> getEventHandlers() {
        return eventHandlers;
    }
Currently the script nonce is user-supplied input, so we have to validate it to prevent header/XSS injections.

@param nonce the nonce to validate
@throws CspException if any errors validating the nonce
primefaces/src/main/java/org/primefaces/csp/CspState.java