@dargmuesli/nuxt-vio 8.3.4 → 8.4.0

package/nuxt.config.ts

@@ -49,6 +49,7 @@ export default defineNuxtConfig(
         '@nuxtjs/html-validator',
         '@nuxtjs/i18n',
         '@nuxtjs/tailwindcss',
+        '@nuxtseo/module',
         '@pinia/nuxt',
         // nuxt-security: remove invalid `'none'`s
         (_options, nuxt) => {
@@ -74,16 +75,18 @@ export default defineNuxtConfig(
                     string,
                     any
                   >
-                )[key] = valueFiltered
+                )[key] = [...new Set(valueFiltered)]
               }
             }
           }
         },
         'nuxt-security',
-        '@nuxtseo/module',
       ],
       nitro: {
         compressPublicAssets: true,
+        experimental: {
+          openAPI: process.env.NODE_ENV === 'development',
+        },
       },
       runtimeConfig: {
         public: {
@@ -177,7 +180,7 @@ export default defineNuxtConfig(
               // Cloudflare
               ...(process.env.NODE_ENV === 'production'
                 ? {
-                    'connect-src': [`${SITE_URL}/cdn-cgi/rum`],
+                    'connect-src': ["'self'"], // `${SITE_URL}/cdn-cgi/rum`
                     'script-src-elem': [
                       'https://static.cloudflareinsights.com',
                     ],
@@ -199,6 +202,7 @@ export default defineNuxtConfig(
             },
             {
               // vio
+              'connect-src': ["'self'"], // `${SITE_URL}/api/healthcheck`
               'manifest-src': [`${SITE_URL}/site.webmanifest`],
               'script-src-elem': [
                 'https://polyfill.io/v3/polyfill.min.js', // ESLint plugin compat
@@ -206,19 +210,21 @@ export default defineNuxtConfig(
             },
             {
               // @nuxt/devtools
-              'frame-src': [
-                ...(process.env.NODE_ENV === 'development'
-                  ? ['http://localhost:3000/__nuxt_devtools__/client/']
-                  : []),
-              ],
+              ...(process.env.NODE_ENV === 'development'
+                ? {
+                    'frame-src': [
+                      'http://localhost:3000/__nuxt_devtools__/client/',
+                    ],
+                  }
+                : {}),
             },
             {
               // nuxt-link-checker
-              'connect-src': [
-                ...(process.env.NODE_ENV === 'development'
-                  ? ['http://localhost:3000/api/__link_checker__/inspect']
-                  : []),
-              ],
+              ...(process.env.NODE_ENV === 'development'
+                ? {
+                    'connect-src': ["'self'"], // 'http://localhost:3000/api/__link_checker__/inspect'
+                  }
+                : {}),
             },
             {
               // nuxt-og-image
@@ -244,12 +250,12 @@ export default defineNuxtConfig(
               'connect-src': [
                 ...(process.env.NODE_ENV === 'development'
                   ? [
-                      'http://localhost:3000/_nuxt/', // Nuxt development
-                      'https://localhost:3000/_nuxt/', // Nuxt development
-                      'ws://localhost:3000/_nuxt/', // Nuxt development
-                      'wss://localhost:3000/_nuxt/', // Nuxt development
+                      'http://localhost:3000/_nuxt/', // hot reload
+                      'https://localhost:3000/_nuxt/', // hot reload
+                      'ws://localhost:3000/_nuxt/', // hot reload
+                      'wss://localhost:3000/_nuxt/', // hot reload
                     ]
-                  : ["'self'"]), // Nuxt build metadata and payloads
+                  : ["'self'"]), // build metadata and payloads
               ],
               'img-src': [
                 "'self'", // TODO: replace with `"'nonce-{{nonce}}'",`
@@ -262,6 +268,18 @@ export default defineNuxtConfig(
                 "'unsafe-inline'", // TODO: replace with `"'nonce-{{nonce}}'",` (https://github.com/vitejs/vite/pull/11864)
               ],
             },
+            {
+              // nitro
+              'connect-src': ["'self'"] /* swagger
+              'http://localhost:3000/_nitro/openapi.json',
+              'http://localhost:3000/_nitro/swagger', */,
+              'script-src-elem': [
+                'https://cdn.jsdelivr.net/npm/', // swagger // TODO: increase precision (https://github.com/unjs/nitro/issues/1757)
+              ],
+              'style-src': [
+                'https://cdn.jsdelivr.net/npm/', // swagger // TODO: increase precision (https://github.com/unjs/nitro/issues/1757)
+              ],
+            },
             {
               // base
               'base-uri': ["'none'"], // does not fallback to `default-src`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dargmuesli/nuxt-vio",
-  "version": "8.3.4",
+  "version": "8.4.0",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/dargmuesli/vio.git"
@@ -105,7 +105,6 @@
     "eslint-plugin-prettier": "5.0.1",
     "eslint-plugin-yml": "1.10.0",
     "h3": "1.8.2",
-    "is-https": "4.0.0",
     "jiti": "1.20.0",
     "jose": "4.15.4",
     "lint-staged": "15.0.2",

package/server/api/healthcheck.get.ts

@@ -1,5 +1,3 @@
-import { defineEventHandler } from 'h3'
-
 export default defineEventHandler((event) => {
   const { res } = event.node
   res.setHeader('Content-Type', 'text/plain')

package/server/middleware/headers.ts

@@ -1,10 +1,6 @@
-import { appendHeader, defineEventHandler } from 'h3'
 import type { H3Event } from 'h3'
 import type { AppConfig } from 'nuxt/schema'
 
-import { TIMEZONE_HEADER_KEY } from '../../utils/constants'
-import { getTimezone } from '../../utils/networking'
-
 export default defineEventHandler(async (event) => {
   setRequestHeader(event, TIMEZONE_HEADER_KEY, await getTimezone(event))
   setResponseHeaders(event)

package/server/utils/util.ts

@@ -0,0 +1,2 @@
+export { TIMEZONE_HEADER_KEY } from '../../utils/constants'
+export { getTimezone } from '../../utils/networking'