removeMiddelware

yieldprotocol · Oct 16, 2023 · b85ce4a · b85ce4a
1 parent 4f6ec65
commit b85ce4a
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 2 deletions.
diff --git a/src/pages/_document.tsx b/src/pages/_document.tsx
@@ -1,9 +1,20 @@
 import Document, { Html, Head, Main, NextScript } from 'next/document';
 
-
+function randomNonce(length = 32) {
+  let nonce = '';
+  const characters = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789';
+  const charactersLength = characters.length;
+  for (let i = 0; i < length; i++) {
+      nonce += characters.charAt(Math.floor(Math.random() * charactersLength));
+  }
+  return nonce;
+}
 
 export default class MyDocument extends Document {
   render() {
+    const nonce = randomNonce();
+    const csp = `object-src 'none'; base-uri 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https: http: 'nonce-${nonce}' 'strict-dynamic'`
+
     return (
       <Html>
         <Head>
@@ -12,11 +23,12 @@ export default class MyDocument extends Document {
             rel="stylesheet"
           />
           <link rel="shortcut icon" href="/favicons/favicon.ico" />
+          <meta httpEquiv="Content-Security-Policy" content={csp} />
           <meta httpEquiv='X-Frame-Options' content='DENY' />
         </Head>
         <body>
           <Main />
-          <NextScript />
+          <NextScript nonce={nonce} />
         </body>
       </Html>
     );

diff --git a/middleware.ts → x_middleware.ts b/middleware.ts → x_middleware.ts