@dargmuesli/nuxt-vio 18.1.0 → 18.2.1

package/nuxt.config.ts

@@ -73,7 +73,7 @@ export default defineNuxtConfig(
                     "'unsafe-inline'", // nuxt-color-mode (https://github.com/nuxt-modules/color-mode/issues/266), runtimeConfig (static)
                   ],
                 },
-                VIO_GET_CSP(SITE_URL),
+                VIO_GET_CSP({ siteUrl: new URL(SITE_URL) }),
                 nuxtConfigSecurityHeaders.contentSecurityPolicy,
               )
             }

package/package.json

@@ -1,21 +1,21 @@
 {
   "dependencies": {
-    "@dargmuesli/nuxt-cookie-control": "8.5.4",
+    "@dargmuesli/nuxt-cookie-control": "8.5.5",
     "@eslint/compat": "1.2.7",
     "@heroicons/vue": "2.2.0",
     "@http-util/status-i18n": "0.9.0",
     "@intlify/eslint-plugin-vue-i18n": "4.0.0",
-    "@nuxt/devtools": "2.3.0",
+    "@nuxt/devtools": "2.3.2",
     "@nuxt/eslint": "1.2.0",
     "@nuxt/image": "1.10.0",
     "@nuxtjs/color-mode": "3.5.2",
     "@nuxtjs/html-validator": "2.1.0",
-    "@nuxtjs/i18n": "9.3.2",
+    "@nuxtjs/i18n": "9.4.0",
     "@nuxtjs/seo": "3.0.1",
     "@pinia/nuxt": "0.10.1",
     "@tailwindcss/forms": "0.5.10",
     "@tailwindcss/typography": "0.5.16",
-    "@tailwindcss/vite": "4.0.14",
+    "@tailwindcss/vite": "4.0.17",
     "@types/lodash-es": "4.17.12",
     "@urql/core": "5.1.1",
     "@urql/vue": "1.4.3",
@@ -23,10 +23,10 @@
     "@vuelidate/validators": "2.0.4",
     "clipboardy": "4.0.0",
     "dayjs": "2.0.0-alpha.4",
-    "eslint": "9.22.0",
+    "eslint": "9.23.0",
     "eslint-config-prettier": "10.1.1",
     "eslint-plugin-compat": "6.0.2",
-    "eslint-plugin-prettier": "5.2.3",
+    "eslint-plugin-prettier": "5.2.5",
     "eslint-plugin-yml": "1.17.0",
     "globals": "16.0.0",
     "jiti": "2.4.2",
@@ -37,7 +37,7 @@
     "vue-tsc": "2.2.8"
   },
   "devDependencies": {
-    "@types/node": "22.13.10",
+    "@types/node": "22.13.14",
     "@urql/devtools": "2.0.3",
     "@urql/exchange-graphcache": "7.2.3",
     "consola": "3.4.2",
@@ -50,11 +50,11 @@
     "prettier-plugin-tailwindcss": "0.6.11",
     "serve": "14.2.4",
     "sharp": "0.33.5",
-    "stylelint": "16.16.0",
+    "stylelint": "16.17.0",
     "stylelint-config-recommended-vue": "1.6.0",
     "stylelint-config-standard": "37.0.0",
     "stylelint-no-unsupported-browser-features": "8.0.4",
-    "tailwindcss": "4.0.14",
+    "tailwindcss": "4.0.17",
     "vue": "3.5.13",
     "vue-router": "4.5.0"
   },
@@ -74,7 +74,7 @@
   "main": "nuxt.config.ts",
   "name": "@dargmuesli/nuxt-vio",
   "peerDependencies": {
-    "nuxt": "3.16.0",
+    "nuxt": "3.16.1",
     "vue": "3.5.13",
     "vue-router": "4.5.0"
   },
@@ -106,5 +106,5 @@
     "start:static": "serve .playground/.output/public --ssl-cert ./.config/certificates/ssl.crt --ssl-key ./.config/certificates/ssl.key"
   },
   "type": "module",
-  "version": "18.1.0"
+  "version": "18.2.1"
 }

package/server/plugins/security.ts

@@ -28,14 +28,13 @@ export const cleanupCsp = (
 
 export default defineNitroPlugin((nitroApp) => {
   nitroApp.hooks.hook('nuxt-security:routeRules', async (routeRules) => {
-    const runtimeConfig = useRuntimeConfig()
-    const siteUrl = runtimeConfig.public.site.url
+    const { siteUrlTyped: siteUrl } = useSiteUrl()
 
     routeRules['/**'] = cleanupCsp(
       defu(
         {
           headers: {
-            contentSecurityPolicy: VIO_GET_CSP(siteUrl),
+            contentSecurityPolicy: VIO_GET_CSP({ siteUrl }),
           },
         },
         routeRules['/**'],

package/shared/utils/constants.ts

@@ -14,7 +14,7 @@ export const COOKIE_CONTROL_CONSENT_COOKIE_NAME =
 export const COOKIE_PREFIX = VIO_SITE_NAME.toLocaleLowerCase()
 export const COOKIE_SEPARATOR = '_'
 export const FETCH_RETRY_AMOUNT = 3
-export const VIO_GET_CSP = (siteUrl: string) =>
+export const VIO_GET_CSP = ({ siteUrl }: { siteUrl: URL }) =>
   defu(
     {
       // Cloudflare
@@ -23,7 +23,7 @@ export const VIO_GET_CSP = (siteUrl: string) =>
             'connect-src': ['https://cloudflareinsights.com'], // analytics
             'script-src-elem': [
               'https://static.cloudflareinsights.com', // analytics
-              `${siteUrl}/cdn-cgi/`, // https://developers.cloudflare.com/fundamentals/reference/cdn-cgi-endpoint/
+              `${siteUrl}cdn-cgi/`, // https://developers.cloudflare.com/fundamentals/reference/cdn-cgi-endpoint/
             ],
           }
         : {}),
@@ -47,7 +47,7 @@ export const VIO_GET_CSP = (siteUrl: string) =>
     },
     {
       // vio
-      'manifest-src': [`${siteUrl}/site.webmanifest`],
+      'manifest-src': [`${siteUrl}site.webmanifest`],
       'script-src-elem': [
         'https://cdnjs.cloudflare.com/polyfill/v3/polyfill.min.js', // ESLint plugin compat
       ],
@@ -56,7 +56,7 @@ export const VIO_GET_CSP = (siteUrl: string) =>
     //   // nuxt-link-checker
     //   ...(process.env.NODE_ENV === 'development'
     //     ? {
-    //         'connect-src': [`${siteUrl}/api/__link_checker__/inspect`],
+    //         'connect-src': [`${siteUrl}api/__link_checker__/inspect`],
     //       }
     //     : {}),
     // },
@@ -64,7 +64,7 @@ export const VIO_GET_CSP = (siteUrl: string) =>
       // nuxt-og-image
       ...(process.env.NODE_ENV === 'development'
         ? {
-            // 'connect-src': [`${siteUrl}/__og-image__/`],
+            // 'connect-src': [`${siteUrl}__og-image__/`],
             'frame-ancestors': ["'self'"],
           }
         : {}),
@@ -73,7 +73,7 @@ export const VIO_GET_CSP = (siteUrl: string) =>
     //   // nuxt-schema-org
     //   ...(process.env.NODE_ENV === 'development'
     //     ? {
-    //         'connect-src': [`${siteUrl}/__schema-org__/debug.json`],
+    //         'connect-src': [`${siteUrl}__schema-org__/debug.json`],
     //       }
     //     : {}),
     // },
@@ -82,8 +82,8 @@ export const VIO_GET_CSP = (siteUrl: string) =>
     //   ...(process.env.NODE_ENV === 'development'
     //     ? {
     //         'connect-src': [
-    //           `${siteUrl}/__robots__/debug.json`,
-    //           `${siteUrl}/__robots__/debug-path.json`,
+    //           `${siteUrl}__robots__/debug.json`,
+    //           `${siteUrl}__robots__/debug-path.json`,
     //         ],
     //       }
     //     : {}),
@@ -92,7 +92,7 @@ export const VIO_GET_CSP = (siteUrl: string) =>
     //   // nuxt-simple-sitemap
     //   ...(process.env.NODE_ENV === 'development'
     //     ? {
-    //         'connect-src': [`${siteUrl}/__sitemap__/debug.json`],
+    //         'connect-src': [`${siteUrl}__sitemap__/debug.json`],
     //       }
     //     : {}),
     // },
@@ -100,7 +100,7 @@ export const VIO_GET_CSP = (siteUrl: string) =>
     //   // nuxt-site-config
     //   ...(process.env.NODE_ENV === 'development'
     //     ? {
-    //         'connect-src': [`${siteUrl}/__site-config__/debug.json`],
+    //         'connect-src': [`${siteUrl}__site-config__/debug.json`],
     //       }
     //     : {}),
     // },
@@ -108,7 +108,7 @@ export const VIO_GET_CSP = (siteUrl: string) =>
       // nuxt
       ...(process.env.NODE_ENV === 'development'
         ? {
-            'frame-src': [`${siteUrl}/__nuxt_devtools__/client/`], // devtools
+            'frame-src': [`${siteUrl}__nuxt_devtools__/client/`], // devtools
           }
         : {}),
       'connect-src': [
@@ -128,11 +128,11 @@ export const VIO_GET_CSP = (siteUrl: string) =>
       ],
       'script-src-elem': [
         "'nonce-{{nonce}}'",
-        `${siteUrl}/_nuxt/`, // bundle
+        `${siteUrl}_nuxt/`, // bundle
       ],
       'style-src': [
         "'unsafe-inline'", // TODO: replace with "'nonce-{{nonce}}'" once Sweetalert supports it
-        "'self'", // TODO: `${siteUrl}/_nuxt/`, // bundle
+        "'self'", // TODO: `${siteUrl}_nuxt/`, // bundle
       ], // TODO: use `style-src-elem` once Playwright WebKit supports it
     },
   )

package/shared/utils/site.ts

@@ -0,0 +1,9 @@
+export const useSiteUrl = () => {
+  const runtimeConfig = useRuntimeConfig()
+  const siteUrl = runtimeConfig.public.site?.url
+
+  return {
+    siteUrl,
+    siteUrlTyped: new URL(siteUrl), // eslint-disable-line compat/compat
+  }
+}