Chore/1.0.0 rc.3 #262
Merged
Chore/1.0.0 rc.3 #262
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
- in SSG mode, modify the 99-cspNonce nitro plugin - in SSR mode, modify the headers for prerendered routes
- revert playground config setup to basis - remove uneccessary tryUseNuxt import in 99-cspNonce
Now that the TS config is compliant, we can - remove @ts-ignore overrides - import from "#imports" instead of importing from dependencies
- no need to import NitroAppPlugin from 'nitropack' - rename 'nitro' variable to 'nitroApp' for clarity
This reverts commit e751f52.
- conform eslint to standard recommendation - fix "template root requires one element" in secret.vue - also conforms 'npm run dev' script setup
- disallow setting nonces on the server via cookie - disallow setting nonces other than through crypto secure method - suppress 'check' mode - do not send nonce via cookie to the frontend
- W3C mandates at least 128 bits of entropy - randomUUID only had 122
Added credentialless as per the Cross-Origin-Embedder-Policy documentation, and you can use it as it solved my usecase.
'credentialless' in CrossOriginEmbedderPolycyValue
Update 3.crossOriginEmbedderPolicy.md
|
The latest updates on your projects. Learn more about Vercel for Git ↗︎
|
Ensure all types are exported
Closed
improve CSP compliance
- add .nuxtrc autoImport directive in docs/ - enables building outside of root directory
- put our security plugins last - allows to insert nonces after all external scripts have been inserted
Fix/typescript-config
fix(csp): ensure-plugins-last
feat(csp): Extend CSP support of SSG mode
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
…th starts with an exclusion but is not included
…obal site is permitted, with only the inclusion criteria taking effect.
This reverts commit 32a2b43.
Fix Basic Auth Configuration for Multiple Paths
feat(csp): use cheerio parser
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
credentiallessvalue toCross-Origin-Embedder-Policyheader @espensgrnonceoption is set totrue@vejjaintervalproperty by @dargmuesli