fix(useScriptTag): support passing nonce (#4753)

1-dilikelei · 董梁玮 · web-flow · commit 573707f33d88 · 2025-06-19T08:01:58.000Z
Co-authored-by: 董梁玮 &lt;14070624+dong-liangwei123@user.noreply.gitee.com&gt;
diff --git a/packages/core/useScriptTag/index.ts b/packages/core/useScriptTag/index.ts
@@ -45,6 +45,12 @@ export interface UseScriptTagOptions extends ConfigurableDocument {
    *
    */
   attrs?: Record<string, string>
+
+  /**
+   * Nonce value for CSP (Content Security Policy)
+   * @default undefined
+   */
+  nonce?: string
 }
 
 /**
@@ -71,6 +77,7 @@ export function useScriptTag(
     defer,
     document = defaultDocument,
     attrs = {},
+    nonce = undefined,
   } = options
   const scriptTag = shallowRef<HTMLScriptElement | null>(null)
 
@@ -117,7 +124,9 @@ export function useScriptTag(
         el.noModule = noModule
       if (referrerPolicy)
         el.referrerPolicy = referrerPolicy
-
+      if (nonce) {
+        el.nonce = nonce
+      }
       Object.entries(attrs).forEach(([name, value]) => el?.setAttribute(name, value))
 
       // Enables shouldAppend
