fix: apply CSP nonce to Next scripts
Magent CI/CD / verify (push) Successful in 4m41s
Magent CI/CD / deploy-beta (push) Successful in 1m40s

This commit is contained in:
2026-09-17 22:51:23 +12:00
parent 91a950a3b0
commit a6a4a9aa24
4 changed files with 9 additions and 4 deletions
-2
View File
@@ -1,5 +1,3 @@
@import url('https://fonts.googleapis.com/css2?family=Manrope:wght@400;500;600;700;800&family=JetBrains+Mono:wght@400;600&display=swap');
* { * {
box-sizing: border-box; box-sizing: border-box;
margin: 0; margin: 0;
+5
View File
@@ -13,8 +13,13 @@ import ApplicationChrome from "./ui/ApplicationChrome";
export const metadata = { export const metadata = {
title: "Magent", title: "Magent",
description: "Request timeline and AI triage for media requests", description: "Request timeline and AI triage for media requests",
icons: { icon: "/api/branding/favicon.ico" },
}; };
// A request-specific CSP nonce is generated in proxy.ts. Dynamic rendering lets
// Next.js apply that nonce to its framework and hydration scripts.
export const dynamic = "force-dynamic";
export default function RootLayout({ children }: { children: ReactNode }) { export default function RootLayout({ children }: { children: ReactNode }) {
return ( return (
<html lang="en" data-theme="dark"> <html lang="en" data-theme="dark">
-2
View File
@@ -1,5 +1,3 @@
@import url('https://fonts.googleapis.com/css2?family=DM+Sans:wght@400;500;600;700&family=Inter:wght@400;500;600&family=JetBrains+Mono:wght@400;500;600;700&display=swap');
/* Stitch production handoff: Media-Ops master system */ /* Stitch production handoff: Media-Ops master system */
* { * {
letter-spacing: 0 !important; letter-spacing: 0 !important;
+4
View File
@@ -25,6 +25,10 @@ const nextConfig = {
}, },
async rewrites() { async rewrites() {
return [ return [
{
source: "/favicon.ico",
destination: `${backendUrl}/branding/favicon.ico`,
},
{ {
source: "/api/:path*", source: "/api/:path*",
destination: `${backendUrl}/:path*`, destination: `${backendUrl}/:path*`,