@next-safe/[email protected]

Minor Changes

• #36 2c8c5cd Thanks @nibtime! - new csp middleware with extensive Typing for IntelliSense CSP configuration

  • typing has been borrowed from the SvelteKit CSP Integration, which is excellent
  • handles annoying single quotes in the background, no need to think about them in code

• #36 2c8c5cd Thanks @nibtime! - versatile getCspInitialProps for _document.js

  • flag to opt into styles trustification for CSP
  • flag to opt out from script trustification for CSP
  • option to pass external raw css text to hash for CSP. For instance needed for Mantine, to pass extractCritical(initialProps.html).css (emotion)
  • option to enhance <App> (_app.js) with nonce from SSR (needed for React Providers that can consume a nonce)

• #36 2c8c5cd Thanks @nibtime! - helper to set up CSP violation reprting to Sentry with a one-liner

Patch Changes

• #36 2c8c5cd Thanks @nibtime! - use base64 encoding for nonce instead of Hex

• #32 c9d42e5 Thanks @boennemann! - fix: use open-ended peerDependency ranges