search

emb417 / metaforiq-next

Personal portfolio and app to demo fun projects: canvas typewriter, canvas force rain matrix style, virtual pinball league data visualizations and libowski.
https://www.metaforiq.com
1 stars 0 forks source link

WWW - GTM Nonce #36

Open emb417 opened 3 weeks ago

emb417 commented 3 weeks ago

Critical: script-src with 'unsafe-inline' or 'unsafe-eval' and without a nonce found. That's dangerous, don't use it. If you really need one of these unsafe directives, add a nonce.

https://developers.google.com/tag-platform/security/guides/csp

emb417 commented 3 weeks ago

NextJS Third Parties package doesn't support a nonce, will need a custom implementation.

https://nextjs.org/docs/pages/building-your-application/configuring/content-security-policy