Add support for style tag nonce attributes (fixes TheSGJ#128)

Author: rossdakin

README.md

@@ -201,8 +201,9 @@ If no props are passed to `<NextTopLoader />`, below is the default configuratio
 - `shadow`: a smooth shadow for the TopLoader. (set it to `false` to disable it)
 - `template`: to include custom HTML attributes for the TopLoader.
 - `zIndex`: defines zIndex for the TopLoader.
-- `showAtBottom`: To show the TopLoader at bottom. (increase height for the TopLoader to ensure it's visibility at the mobile devices)
-- `showForHashAnchor`: To show for "#" url or not. (set it to `false` to disable it)
+- `showAtBottom`: to show the TopLoader at bottom. (increase height for the TopLoader to ensure it's visibility at the mobile devices).
+- `showForHashAnchor`: to show for "#" url or not. (set it to `false` to disable it).
+- `nonce`: to add nonces to the `<style>` tags, for [Content Security Policy](https://www.w3.org/TR/2016/REC-CSP2-20161215/#script-src-the-nonce-attribute).
 
 #### `NextTopLoaderProps` (props passed to the TopLoader)
 
@@ -221,6 +222,7 @@ If no props are passed to `<NextTopLoader />`, below is the default configuratio
 | `zIndex`            | `number`          | `1600`                                                                                                                                  |
 | `showAtBottom`      | `boolean`         | `false`                                                                                                                                 |
 | `showForHashAnchor` | `boolean`         | `true`                                                                                                                                  |
+| `nonce`             | `string`          | `undefined`                                                                                                                             |
 
 ## Contributors
 

src/index.tsx

@@ -87,6 +87,10 @@ export type NextTopLoaderProps = {
    *
    */
   showForHashAnchor?: boolean;
+  /**
+   * Nonce of the inline styles for [Content Security Policy](https://www.w3.org/TR/2016/REC-CSP2-20161215/#script-src-the-nonce-attribute).
+   */
+  nonce?: string;
 };
 
 /**
@@ -112,6 +116,7 @@ const NextTopLoader = ({
   zIndex = 1600,
   showAtBottom = false,
   showForHashAnchor = true,
+  nonce,
 }: NextTopLoaderProps): React.JSX.Element => {
   const defaultColor = '#29d';
   const defaultHeight = 3;
@@ -135,7 +140,7 @@ const NextTopLoader = ({
    * CSS Styles for the NextTopLoader
    */
   const styles = (
-    <style>
+    <style nonce={nonce}>
       {`#nprogress{pointer-events:none}#nprogress .bar{background:${color};position:fixed;z-index:${zIndex};${positionStyle}left:0;width:100%;height:${height}px}#nprogress .peg{display:block;position:absolute;right:0;width:100px;height:100%;${boxShadow};opacity:1;-webkit-transform:rotate(3deg) translate(0px,-4px);-ms-transform:rotate(3deg) translate(0px,-4px);transform:rotate(3deg) translate(0px,-4px)}#nprogress .spinner{display:block;position:fixed;z-index:${zIndex};${spinnerPositionStyle}right:15px}#nprogress .spinner-icon{width:18px;height:18px;box-sizing:border-box;border:2px solid transparent;border-top-color:${color};border-left-color:${color};border-radius:50%;-webkit-animation:nprogress-spinner 400ms linear infinite;animation:nprogress-spinner 400ms linear infinite}.nprogress-custom-parent{overflow:hidden;position:relative}.nprogress-custom-parent #nprogress .bar,.nprogress-custom-parent #nprogress .spinner{position:absolute}@-webkit-keyframes nprogress-spinner{0%{-webkit-transform:rotate(0deg)}100%{-webkit-transform:rotate(360deg)}}@keyframes nprogress-spinner{0%{transform:rotate(0deg)}100%{transform:rotate(360deg)}}`}
     </style>
   );
@@ -245,7 +250,7 @@ const NextTopLoader = ({
 
           // To debug the anchor target:
           // console.log('Given target is', (anchor as HTMLAnchorElement).target);
-          const isExternalLink = ((anchor as HTMLAnchorElement).target as React.HTMLAttributeAnchorTarget) !== '' ;
+          const isExternalLink = ((anchor as HTMLAnchorElement).target as React.HTMLAttributeAnchorTarget) !== '';
 
           // Check for Special Schemes
           const isSpecialScheme = ['tel:', 'mailto:', 'sms:', 'blob:', 'download:'].some((scheme) =>

src/pages.tsx

@@ -22,6 +22,7 @@ export const PagesTopLoader = ({
   template,
   zIndex = 1600,
   showAtBottom = false,
+  nonce,
 }: NextTopLoaderProps): JSX.Element => {
   const defaultColor = '#29d';
   const defaultHeight = 3;
@@ -34,8 +35,8 @@ export const PagesTopLoader = ({
     !shadow && shadow !== undefined
       ? ''
       : shadow
-      ? `box-shadow:${shadow}`
-      : `box-shadow:0 0 10px ${color},0 0 5px ${color}`;
+        ? `box-shadow:${shadow}`
+        : `box-shadow:0 0 10px ${color},0 0 5px ${color}`;
 
   // Check if to show at bottom
   const positionStyle = showAtBottom ? 'bottom: 0;' : 'top: 0;';
@@ -45,7 +46,7 @@ export const PagesTopLoader = ({
    * CSS Styles for the NextTopLoader
    */
   const styles = (
-    <style>
+    <style nonce={nonce}>
       {`#nprogress{pointer-events:none}#nprogress .bar{background:${color};position:fixed;z-index:${zIndex};${positionStyle}left:0;width:100%;height:${height}px}#nprogress .peg{display:block;position:absolute;right:0;width:100px;height:100%;${boxShadow};opacity:1;-webkit-transform:rotate(3deg) translate(0px,-4px);-ms-transform:rotate(3deg) translate(0px,-4px);transform:rotate(3deg) translate(0px,-4px)}#nprogress .spinner{display:block;position:fixed;z-index:${zIndex};${spinnerPositionStyle}right:15px}#nprogress .spinner-icon{width:18px;height:18px;box-sizing:border-box;border:2px solid transparent;border-top-color:${color};border-left-color:${color};border-radius:50%;-webkit-animation:nprogress-spinner 400ms linear infinite;animation:nprogress-spinner 400ms linear infinite}.nprogress-custom-parent{overflow:hidden;position:relative}.nprogress-custom-parent #nprogress .bar,.nprogress-custom-parent #nprogress .spinner{position:absolute}@-webkit-keyframes nprogress-spinner{0%{-webkit-transform:rotate(0deg)}100%{-webkit-transform:rotate(360deg)}}@keyframes nprogress-spinner{0%{transform:rotate(0deg)}100%{transform:rotate(360deg)}}`}
     </style>
   );