nibtime

[BUG]: configuration of CSP report directives (report-uri, report-to) is unsound

3

### Describe the bug ```js const nextSafe = require('next-safe'); const isDev = process.env.NODE_ENV !== 'production'; module.exports = { async headers() { return [ { source: '/:path*', headers: nextSafe({ isDev, contentSecurityPolicy:...

A variant of your component + some ideas on this

1

Hi @guydumais I read your blog post about strict CSP with Next, got curious, and tried it out on my latest project with Next.js 12 Unfortunately, your package didn't work....

### Motivation The main problem regarding maintainability is that it is the single package that depends on latest Next as a whole. * to support more setups/versions of Next *...

isomorphic component (Browser + SSR) for HTML sanitization paired with CSP

5

### Motivation Where is the isomorphic `` component? I think this package is a good context to provide this component and pair it with CSP ### Idea HTML Sanitization has...

### Motivation for testing the strict CSP features, it is mandatory to do so in a real production test environment. Until now, I've been doing that manually with the provisionary...

### Moitivation In work projects I always use setups for the follwing services: * DatoCMS for Content Management * Vercel for Deployment * Sentry for Monitoring * Stripe for Payment...