2 Commits

Author	SHA1	Message	Date
Divanshu Chauhan	067a7c6000	fix(csp): match script-src-elem/attr when extracting script nonce (#2049) ... Select the CSP nonce directive via startsWith("script-src") / startsWith("default-src"), matching Next.js get-script-nonce-from-header. Previously the exact-match predicate skipped script-src-elem/script-src-attr directives, so a CSP declaring the nonce only on script-src-elem fell through to default-src and SSR scripts could be emitted without the expected nonce and blocked by the browser CSP. Closes #1989	2026-06-15 23:39:55 +01:00
Stephen Zhou	14ff303cbd	feat: csp support (#795) ... * fix: support csp * tweaks * tweaks * tweaks * tweaks * tweaks * tweaks * clean * tweaks * clean * fix test * tweaks * fix lock * fix test * trigger ci * tweaks * tweaks	2026-04-09 09:14:13 +01:00