Skip to content

Commit e507828

Browse files
authored
examples: Update Middleware for CSP (vercel#58300)
1 parent b2c926f commit e507828

File tree

1 file changed

+12
-5
lines changed

1 file changed

+12
-5
lines changed

‎examples/with-strict-csp/middleware.js‎

Lines changed: 12 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -15,23 +15,30 @@ export function middleware(request){
1515
block-all-mixed-content;
1616
upgrade-insecure-requests;
1717
`
18+
// Replace newline characters and spaces
19+
constcontentSecurityPolicyHeaderValue=cspHeader
20+
.replace(/\s{2,}/g,' ')
21+
.trim()
1822

1923
constrequestHeaders=newHeaders(request.headers)
20-
21-
// Setting request headers
2224
requestHeaders.set('x-nonce',nonce)
2325
requestHeaders.set(
2426
'Content-Security-Policy',
25-
// Replace newline characters and spaces
26-
cspHeader.replace(/\s{2,}/g,' ').trim()
27+
contentSecurityPolicyHeaderValue
2728
)
2829

29-
returnNextResponse.next({
30+
constresponse=NextResponse.next({
3031
headers: requestHeaders,
3132
request: {
3233
headers: requestHeaders,
3334
},
3435
})
36+
response.headers.set(
37+
'Content-Security-Policy',
38+
contentSecurityPolicyHeaderValue
39+
)
40+
41+
returnresponse
3542
}
3643

3744
exportconstconfig={

0 commit comments

Comments
(0)