fix: CSP causing scripts not to load correctly

ruchernchong · Dec 1, 2024 · c4f07b0 · c4f07b0
1 parent 068684b
commit c4f07b0
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 4 deletions.
diff --git a/config/index.ts b/config/index.ts
@@ -3,8 +3,9 @@ export interface NavLink {
   href: string;
 }
 
-export const BASE_URL: string =
-  process.env.NEXT_PUBLIC_BASE_URL || "https://ruchern.dev";
+export const DOMAIN_NAME = "ruchern.dev";
+export const BASE_URL =
+  process.env.NEXT_PUBLIC_BASE_URL || `https://${DOMAIN_NAME}`;
 
 export const navLinks: NavLink[] = [
   // { title: "Blog", href: "/blog" },

diff --git a/middleware.ts b/middleware.ts
@@ -1,12 +1,13 @@
 import { NextRequest, NextResponse } from "next/server";
+import { DOMAIN_NAME } from "@/config";
 
 export const middleware = (request: NextRequest) => {
   const nonce = Buffer.from(crypto.randomUUID()).toString("base64");
 
   const cspHeader = `
     default-src 'self';
-    script-src 'self' 'nonce-${nonce}' 'strict-dynamic';
-    style-src 'self' 'nonce-${nonce}';
+    script-src 'self' 'unsafe-inline' *.${DOMAIN_NAME} *.vercel-scripts.com *.googletagmanager.com;
+    style-src 'self' 'unsafe-inline';
     img-src 'self' blob: data:;
     font-src 'self';
     object-src 'none';