RootCauseunvalidated
The CSP was applied in an incompatible way and the script nonces Next.js generates were not correctly reflected in the active CSP header (plus nonce generation/usage behavior differs in dev vs prod). Additionally, nonces require dynamic rendering at the root layout so they are regenerated per request.
e9c85a3f-82fd-45d2-97b6-354c1621cb6d
The CSP was applied in an incompatible way and the script nonces Next.js generates were not correctly reflected in the active CSP header (plus nonce generation/usage behavior differs in dev vs prod). Additionally, nonces require dynamic rendering at the root layout so they are regenerated per request.