Add nonces to adapter-cloudflare.

sveltejs · Jan 8, 2022 · cf26271 · cf26271
1 parent 7e693d5
commit cf26271
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 3 deletions.
diff --git a/packages/adapter-cloudflare/files/worker.js b/packages/adapter-cloudflare/files/worker.js
@@ -1,4 +1,4 @@
-/* global ASSETS */
+/* global ASSETS, GENERATE_NONCES */
 import { init, render } from '../output/server/app.js';
 
 init();
@@ -18,7 +18,8 @@ export default {
 				query: url.searchParams || '',
 				rawBody: await read(req),
 				headers: Object.fromEntries(req.headers),
-				method: req.method
+				method: req.method,
+				nonce: GENERATE_NONCES && btoa(crypto.getRandomValues(new Uint32Array(2)))
 			});
 
 			if (rendered) {

diff --git a/packages/adapter-cloudflare/index.js b/packages/adapter-cloudflare/index.js
@@ -45,7 +45,10 @@ export default function (options = {}) {
 				outfile: target_worker,
 				allowOverwrite: true,
 				format: 'esm',
-				bundle: true
+				bundle: true,
+				define: {
+					GENERATE_NONCES: config.kit.cspNonce.toString()
+				}
 			});
 		}
 	};