fix(nonce): set nonce value when using ssg

Baroshem · Jul 18, 2023 · b25342d · b25342d
1 parent 4cb390a
commit b25342d
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/src/runtime/nitro/plugins/cspNonce.ts b/src/runtime/nitro/plugins/cspNonce.ts
@@ -27,6 +27,12 @@ export default <NitroAppPlugin> function (nitro) {
 
     if (!nonce) { return }
 
+    // Replace nonce attribute in http-equiv meta tag
+    html.head = html.head.map((meta) => {
+      if (!meta.startsWith('<meta http-equiv="Content-Security-Policy"')) { return meta }
+      return meta.replaceAll('{{nonce}}', nonce)
+    })
+
     // Add nonce attribute to all link tags
     html.head = html.head.map(link => link.replaceAll(tagNotPrecededByQuotes('link'), `<link nonce="${nonce}"`))
     html.bodyAppend = html.bodyAppend.map(link => link.replaceAll(tagNotPrecededByQuotes('link'), `<link nonce="${nonce}"`))