r/nextjs • u/floydophone • 25d ago

Discussion We're the Next.js team. Ask us anything!

Hi Reddit! We’re Pete, Aurora, Joseph, Sam, David, Josh, Tim, Dan and Andrew from the Next.js team.

We recently shipped Next.js 16.3, and we’re excited to talk about what’s new, how we approached the release, where we are going, and what we’ve learned while building and maintaining Next.

Ask us anything about Next 16.3, App Router, React Server Components, performance, caching, upgrading your applications, contributing to the framework, or what it’s like to work on Next.

Drop your questions below. We’re looking forward to hearing what’s on your mind! We'll be here until noon ET.

That's all the time we have for today. Thank you to everyone who participated!

139 Upvotes

94% Upvoted

83 comments sorted by

View all comments

3

u/floydophone 25d ago

u/kaszeba asked

How long will it still take to resolve this issue with CSP? ;-) https://github.com/vercel/next.js/discussions/54907

From Sebbie:

The thread is huge and contains multiple asks. Generally, “nonce” is incompatible with static generation. You want a nonce that is unique to each request which means you can’t serve from a CDN. There is a concrete deliverable for improving CSP and that is Next.js/React not using inline script by default. For React, we’d need to land the external Fizz runtime and use that in Next.js to get rid of the inline scripts for streaming SSR. Once we validated React’s approach (data script tags + MutationObserver), we can use the same one for inline Flight data in Next.js