nitro-nightly 3.0.1-20251116-134446-b005d480 → 3.0.1-20251116-142138-25872617

package/dist/_presets.mjs

@@ -1420,6 +1420,16 @@ function generateBuildConfig(nitro, o11Routes) {
 				if (routeRules.headers) route = defu(route, { headers: routeRules.headers });
 				return route;
 			}),
+			...nitro.options.vercel?.skewProtection && nitro.options.manifest?.deploymentId ? [{
+				src: "/.*",
+				has: [{
+					type: "header",
+					key: "Sec-Fetch-Dest",
+					value: "document"
+				}],
+				headers: { "Set-Cookie": `__vdpl=${nitro.options.manifest.deploymentId}; Path=${nitro.options.baseURL}; SameSite=Strict; Secure; HttpOnly` },
+				continue: true
+			}] : [],
 			...nitro.options.publicAssets.filter((asset) => !asset.fallthrough).map((asset) => joinURL(nitro.options.baseURL, asset.baseURL || "/")).map((baseURL) => ({
 				src: baseURL + "(.*)",
 				headers: { "cache-control": "public,max-age=31536000,immutable" },
@@ -1548,6 +1558,7 @@ async function writePrerenderConfig(filename, isrConfig, bypassToken) {
 const vercel = defineNitroPreset({
 	entry: "./vercel/runtime/vercel.{format}",
 	manifest: { deploymentId: process.env.VERCEL_DEPLOYMENT_ID },
+	vercel: { skewProtection: !!process.env.VERCEL_SKEW_PROTECTION_ENABLED },
 	output: {
 		dir: "{{ rootDir }}/.vercel/output",
 		serverDir: "{{ output.dir }}/functions/__server.func",
@@ -1582,6 +1593,7 @@ const vercel = defineNitroPreset({
 const vercelStatic = defineNitroPreset({
 	extends: "static",
 	manifest: { deploymentId: process.env.VERCEL_DEPLOYMENT_ID },
+	vercel: { skewProtection: !!process.env.VERCEL_SKEW_PROTECTION_ENABLED },
 	output: {
 		dir: "{{ rootDir }}/.vercel/output",
 		publicDir: "{{ output.dir }}/static/{{ baseURL }}"

package/dist/types/index.d.mts

@@ -1780,6 +1780,13 @@ interface VercelServerlessFunctionConfig {
 }
 interface VercelOptions {
   config: VercelBuildConfigV3;
+  /**
+   * If you have enabled skew protection in the Vercel dashboard, it will
+   * be enabled by default.
+   *
+   * You can disable the Nitro integration by setting this option to `false`.
+   */
+  skewProtection?: boolean;
   /**
    * If you are using `vercel-edge`, you can specify the region(s) for your edge function.
    * @see https://vercel.com/docs/concepts/functions/edge-functions#edge-function-regions

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nitro-nightly",
-  "version": "3.0.1-20251116-134446-b005d480",
+  "version": "3.0.1-20251116-142138-25872617",
   "description": "Build and Deploy Universal JavaScript Servers",
   "homepage": "https://nitro.build",
   "repository": "nitrojs/nitro",