Explore removing inline module script for Blazor Wasm

[TanayParikh]

aspnetcore/src/Components/Web.JS/src/Platform/Mono/MonoPlatform.ts

Lines 201 to 215 in 5750125

	// Due to a strange behavior in macOS Catalina, we have to delay loading the WebAssembly files
	// until after it finishes evaluating a <script> element that assigns a value to window.Module.
	// This may be fixed in a later version of macOS/iOS, or even if not it may be possible to reduce
	// this to a smaller workaround.
	function addGlobalModuleScriptTagsToDocument(callback: () => void) {
	const scriptElem = document.createElement('script');
	// This pollutes global but is needed so it can be called from the script.
	// The callback is put in the global scope so that it can be run after the script is loaded.
	// onload cannot be used in this case for non-file scripts.
	window['__wasmmodulecallback__'] = callback;
	scriptElem.text = 'var Module; window.__wasmmodulecallback__(); delete window.__wasmmodulecallback__;';
	document.body.appendChild(scriptElem);
	}

[TanayParikh]

Note, if / when this is done, we must update the associated CSP guidance to stop requiring the script hash as part of the CSP.

[guardrex]

Side-note for docs tracking: I'm going to let this PU issue track the work and not keep a docs repo issue on this given that it's an IF/WHEN scenario at this time.