What's Changed
- feat(csp): add support for Content-Security-Policy-Report-Only header by @Gonzo17 in #672
- fix: compute CSP hashes from final HTML in render:response by @harlan-zw in #705
Resolves #704 Backtracking regex issue in plugin cspSsrNonce
Resolves #684 Default strict: false does not work on Nuxt production build
Update Node to 24.x
#674 nuxt/hints#186 (comment)
Security Advisory GHSA-6cv5-qqmv-j28h
Security Advisory GHSA-7hcp-x3c6-53f3
New Contributors
- @Gonzo17 made their first contribution in #672
- @harlan-zw made their first contribution in #705
Full Changelog: v2.5.1...v2.6.0
Contributors
Gonzo17 and harlan-zw