July 18, 2026HeaderTest Team
How to Add a Content Security Policy to a Next.js App
Next.js emits inline hydration scripts, so a naive script-src blocks your own app. Here is the clean nonce + strict-dynamic setup in middleware, plus the styled-jsx and next/image gotchas.
Read more