Danijel Martinek 00fcc9d9a1 fix(core-shared): set CSP on forwarded request headers for nonce ...

Next.js only injects the nonce into its own scripts when it can read it
from the request's Content-Security-Policy header. Setting the CSP only
on the response left hydration scripts un-nonced in production (A9).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-07-10 17:24:01 +02:00

..

auth

fix(auth): stop leaking usernames via emailDomain span attribute

2026-07-10 17:22:00 +02:00

blog

build: bump vitest past GHSA-5xrq-8626-4rwp; coverage-v8 everywhere

2026-07-10 16:44:48 +02:00

core-analytics

build: bump vitest past GHSA-5xrq-8626-4rwp; coverage-v8 everywhere

2026-07-10 16:44:48 +02:00

core-api

build: bump vitest past GHSA-5xrq-8626-4rwp; coverage-v8 everywhere

2026-07-10 16:44:48 +02:00

core-audit

build: bump vitest past GHSA-5xrq-8626-4rwp; coverage-v8 everywhere

2026-07-10 16:44:48 +02:00

core-cms

build: bump vitest past GHSA-5xrq-8626-4rwp; coverage-v8 everywhere

2026-07-10 16:44:48 +02:00

core-consent

build: bump vitest past GHSA-5xrq-8626-4rwp; coverage-v8 everywhere

2026-07-10 16:44:48 +02:00

core-dsr

build: bump vitest past GHSA-5xrq-8626-4rwp; coverage-v8 everywhere

2026-07-10 16:44:48 +02:00

core-eslint

build: bump vitest past GHSA-5xrq-8626-4rwp; coverage-v8 everywhere

2026-07-10 16:44:48 +02:00

core-shared

fix(core-shared): set CSP on forwarded request headers for nonce

2026-07-10 17:24:01 +02:00

core-testing

fix(core-testing): align RecordingEventBus with real bus semantics

2026-07-10 17:21:52 +02:00

core-trpc

build: bump vitest past GHSA-5xrq-8626-4rwp; coverage-v8 everywhere

2026-07-10 16:44:48 +02:00

core-typescript

docs: correct stale no-op comments in node test setup

2026-07-10 17:20:27 +02:00

core-ui

build: bump vitest past GHSA-5xrq-8626-4rwp; coverage-v8 everywhere

2026-07-10 16:44:48 +02:00

marketing-pages

build: bump vitest past GHSA-5xrq-8626-4rwp; coverage-v8 everywhere

2026-07-10 16:44:48 +02:00

media

build: bump vitest past GHSA-5xrq-8626-4rwp; coverage-v8 everywhere

2026-07-10 16:44:48 +02:00

navigation

build: bump vitest past GHSA-5xrq-8626-4rwp; coverage-v8 everywhere

2026-07-10 16:44:48 +02:00