You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
In production mode, the options object passed to createHandler is only ever evaluated once on startup (or maybe first request?). This renders setting a nonce in the context useless, because it will always be the same value.
Expected behavior 🤔
If the HandlerOptions is a function, it should be executed for every page event/request and not done on initial startup.
Steps to reproduce 🕹
Steps:
Create the entry-server with an function (async or not) that gets and returns a unique nonce value:
Duplicates
Latest version
Current behavior 😯
Related to #1440
In production mode, the options object passed to createHandler is only ever evaluated once on startup (or maybe first request?). This renders setting a nonce in the context useless, because it will always be the same value.
Expected behavior 🤔
If the HandlerOptions is a function, it should be executed for every page event/request and not done on initial startup.
Steps to reproduce 🕹
Steps:
Create the entry-server with an function (async or not) that gets and returns a unique nonce value:
View page output and notice that the nonce never changes.
Important
This is only reproducible when the server is built and run – it does NOT reproduce in dev mode.
Context 🔦
https://content-security-policy.com/nonce/
Your environment 🌎
The text was updated successfully, but these errors were encountered: