From 311dd3a08656da976407c111c4c4c5f15d022838 Mon Sep 17 00:00:00 2001
From: Zhi <freemanzheng@hotmail.com>
Date: Sat, 13 Jun 2026 01:58:27 +0800
Subject: [PATCH] fix: warn when CSP nonce is missing despite useNonce config

---
 packages/fresh/src/middlewares/csp.ts | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/packages/fresh/src/middlewares/csp.ts b/packages/fresh/src/middlewares/csp.ts
index 0f0b6f558c4..ba19c54d793 100644
--- a/packages/fresh/src/middlewares/csp.ts
+++ b/packages/fresh/src/middlewares/csp.ts
@@ -129,6 +129,9 @@ export function csp<State>(options: CSPOptions = {}): Middleware<State> {
         return d;
       });
     } else {
+      console.warn(
+        "CSP nonce not found on response. Did you use ctx.render() or a non-render response method like ctx.html()?",
+      );
       directives = merged;
     }