From 274ca6f5ca294270352625de014f1423fb921d0e Mon Sep 17 00:00:00 2001
From: IllusionMan1212 <hisham.abourgheba@gmail.com>
Date: Fri, 16 Oct 2026 00:27:16 +0200
Subject: [PATCH] fix(web): nonce Google tag loader

---
 apps/web/app/entry.server.tsx | 2 +-
 apps/web/app/root.tsx         | 1 +
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/apps/web/app/entry.server.tsx b/apps/web/app/entry.server.tsx
index 47d8853..3bd7c0d 100644
--- a/apps/web/app/entry.server.tsx
+++ b/apps/web/app/entry.server.tsx
@@ -46,7 +46,7 @@ function contentSecurityPolicy(nonce: string): string {
   const mediaOrigin = new URL(STRAPI_URL).origin;
   const directives = [
     "default-src 'self'",
-    `script-src 'self' 'nonce-${nonce}' https://www.googletagmanager.com`,
+    `script-src 'self' 'nonce-${nonce}' 'strict-dynamic' https://www.googletagmanager.com`,
     "script-src-attr 'none'",
     "style-src 'self' 'unsafe-inline'",
     `img-src 'self' ${mediaOrigin} https://www.google-analytics.com data: blob:`,
diff --git a/apps/web/app/root.tsx b/apps/web/app/root.tsx
index 29e2d5e..52aa593 100644
--- a/apps/web/app/root.tsx
+++ b/apps/web/app/root.tsx
@@ -211,6 +211,7 @@ export function Layout({ children }: { children: ReactNode }) {
         <Meta />
         <Links />
         <script
+          nonce={nonce}
           async
           src="https://www.googletagmanager.com/gtag/js?id=G-TJT6NM2DMT"
         />