search

vercel / speed-insights

Vercel Speed Insights package
https://vercel.com/docs/speed-insights
Apache License 2.0
63 stars 9 forks source link

Support nonce-based CSP #70

Closed pmmmwh closed 5 months ago

pmmmwh commented 5 months ago

When using a nonce-based strict CSP, the speed-insights script will be blocked by the browser.

Is support for a nonce config option something acceptable?

Ref: https://nextjs.org/docs/pages/building-your-application/configuring/content-security-policy https://csp.withgoogle.com/docs/strict-csp.html

pmmmwh commented 5 months ago

Seems to be a non-issue if injected properly within the same script + strict-dynamic.