Post

Good question! Today, CSP nonces don’t work well with Cache Components’ instant shell because the nonce is created per request, while the shell is prepared ahead of the request.

So if you want to keep instant navigation/PPR today, the practical workaround is to allow unsafe-inline for the framework scripts/styles. If strict nonces are a hard requirement, opt those routes into request-time rendering instead.