Post

attention nuxt users! 👉 I'd love your thoughts on this RFC for built-in content security policy support ... from our very own @jacobandrewsky.bsky.social ❤️

github.comSupport for Content Security Policy · nuxt nuxt · Discussion #30404Summary The contentSecurityPolicy is a new top level configuration option in the nuxt.config.ts file that allows developers to easily configure Content Security Policy in their Nuxt apps. Implement...

11/2/25, 11:43 am8 reposts47 likes

Nathan Chase

@nathanchase.com

12 Feb 2025

It seems to me that nuxt.com/modules/secu... does a fine job of handling this for those that choose to opt-in. Not sure it needs to be in Nuxt core - other than if it's a desire to force all apps to be more secure by default.

nuxt.comSecurity · Nuxt ModulesSecurity Module for Nuxt based on OWASP Top 10 and Helmet

daniel r(ooooooh) in nyc 🇺🇸

@danielroe.dev

12 Feb 2025

I think making apps more secure by default seems like a pretty good aim

Nathan Chase

@nathanchase.com

12 Feb 2025

Certainly true. I just wonder if it will add to confusion as to why some part of an app isn't working as intended as a result of a CSP that results in errors. There's some overhead there of an influx of help questions, GH issues, etc. and a need of comprehensive documentation of CSP.

Eduardo Camillo

@educkf.bsky.social

11 Feb 2025

This is beautiful!