You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I agree with this approach and can totally see why it could fail. Nuxt Security should handle it with nonce generation properly.
Or the upcoming CSP support for Nuxt framework in general :)
I wonder how we should approach it to not cause breaking changes instantly. Maybe we could add a note first that this prop will be deprecated with a newer version and users should use Nuxt Security instead?
The Nonce feature in Nuxt Image can bring many security concerns.
The biggest ones of them all are:
It might be a better idea to leave the security of images for Nuxt Security to handle, as it takes care of all these concerns.
The text was updated successfully, but these errors were encountered: