fix(web): nonce JSON-LD scripts

This commit is contained in:
2026-10-16 00:21:33 +02:00
parent e6069248b0
commit 9119599e45
2 changed files with 52 additions and 1 deletions
+5 -1
View File
@@ -20,6 +20,7 @@ import type { RenderToPipeableStreamOptions } from "react-dom/server";
import { renderToPipeableStream } from "react-dom/server";
import { DEFAULT_LOCALE, getLocaleFromPathname } from "~/i18n/config";
import { nonceJsonLdScripts } from "~/lib/csp-stream.server";
import { getServerEnv } from "~/lib/env.server";
export const streamTimeout = 5_000;
@@ -113,7 +114,10 @@ export default function handleRequest(
callback();
},
});
const stream = createReadableStreamFromReadable(body);
const responseBody = nonce
? body.pipe(nonceJsonLdScripts(nonce))
: body;
const stream = createReadableStreamFromReadable(responseBody);
responseHeaders.set("Content-Type", "text/html");
responseHeaders.set("Content-Language", contentLanguage(request));