Issues

• Prerendered pages lose their security headers when @nuxtjs/sitemap runs with zeroRuntime

  bug
  Baroshem/nuxt-security#775 · Filter by author Oui-Dev opened on Nov 15, 2026

• Rate limiter: a /path/** rule sets the limit for /path but not its counter, so /path shares the global counter and can shrink it

  Baroshem/nuxt-security#774 · Filter by author gimz12 opened on Nov 12, 2026

• Rate limiter allows tokensPerInterval + 1 requests in the first interval

  Baroshem/nuxt-security#772 · Filter by author derblub opened on Nov 11, 2026

• corsHandler throws ERR_HTTP_HEADERS_SENT on every preflight with h3 v1 since 2.7.0

  Baroshem/nuxt-security#770 · Filter by author bjornftw opened on Oct 30, 2026

• xssValidator crashes every request with escapeHtml is not a function since xss@1.0.16

  bug
  Baroshem/nuxt-security#767 · Filter by author jlemonz opened on Oct 23, 2026

• CSP Nonce breaks on inline styles with tailwind classes

  bug
  Baroshem/nuxt-security#760 · Filter by author brettwray opened on Sep 11, 2026

• Nonce not injected on bodyAppend scripts when experimental.ssrStreaming is enabled

  bug
  Baroshem/nuxt-security#757 · Filter by author nguyengg opened on Aug 26, 2026

• [Vite 8] Both esbuild and oxc options were set

  bug
  Baroshem/nuxt-security#737 · Filter by author DamianGlowala opened on Jul 15, 2026
  2

• nuxt-security overwrites user routeRules['/__nuxt_hints/**'] instead of merging

  Baroshem/nuxt-security#732 · Filter by author JonathanXDR opened on Jun 25, 2026
  2

• XSS validator returns 400 for valid rich-text JSON payload in POST body

  Baroshem/nuxt-security#720 · Filter by author kouts opened on Jun 1, 2026
  2

• Simultaneous Content-Security-Policy and Content-Security-Policy-Report-Only Headers

  enhancement
  Baroshem/nuxt-security#718 · Filter by author Tidwell opened on May 22, 2026
  1

• When installing with bunx incompatible version is detected

  bug
  Baroshem/nuxt-security#681 · Filter by author pkorac opened on Mar 1, 2026
  4

• Rate limiter calls useStorage() at module top-level and crashes during prerender

  bug
  Baroshem/nuxt-security#680 · Filter by author Anoesj opened on Feb 28, 2026
  1

• nuxt-security middleware blocks _payload.json-isr requests on ISR routes, causing 404 errors

  bug
  Baroshem/nuxt-security#678 · Filter by author jlemonz opened on Feb 20, 2026
  13

• security headers not consistently applied (CSP/Permissions/COOP+COEP+CORP) + unexpected Access-Control-Allow-Origin: * during nuxi preview

  question
  Baroshem/nuxt-security#677 · Filter by author v0develop opened on Jan 24, 2026
  2

• Nuxt app hangs after build when using PGlite multi-tab worker with nuxt-security

  bug
  Baroshem/nuxt-security#668 · Filter by author Us3r-gitHub opened on Dec 22, 2025
  3

• Sandbox/iframe issues with Turnstile

  bug
  Baroshem/nuxt-security#666 · Filter by author ddavisj opened on Dec 11, 2025
  7

• Support for Mixed SSG and SSR Mode with Dynamic Nonce Handling in nuxt-security

  question
  Baroshem/nuxt-security#665 · Filter by author alexbidenko opened on Dec 10, 2025
  1

• SRI compatibility with Nuxt 4 entryImportMap - integrity hash mismatch on dynamic imports

  bug
  Baroshem/nuxt-security#657 · Filter by author alexteodor33 opened on Oct 13, 2025
  3

• SRI applied incorrectly to <link rel="preload|modulepreload">

  bug
  Baroshem/nuxt-security#655 · Filter by author MinakoKitani opened on Sep 16, 2025
  2

• Exposed Network

  enhancement
  Baroshem/nuxt-security#646 · Filter by author Bcdo opened on Aug 8, 2025
  2

• 🔐 Feature Request: Per-Extension Configuration for Nuxt-Security

  enhancement
  Baroshem/nuxt-security#633 · Filter by author envygeeks opened on Jun 20, 2025
  1

• runtime config usage might break on cloudflare

  bug
  Baroshem/nuxt-security#632 · Filter by author danielroe opened on Jun 11, 2025
  1

• excludedUrls is mentioned in docs but not available in csrf options

  bug
  Baroshem/nuxt-security#631 · Filter by author scherddel opened on Jun 7, 2025
  1

• How to pass env variables into contentSecurityPolicy

  question
  Baroshem/nuxt-security#627 · Filter by author kalnode opened on May 5, 2025
  6