Add support for Content-Security-Policy

.changeset/five-terms-smell.md

@@ -0,0 +1,5 @@
+---
+'react-use-intercom': patch
+---
+
+Add support for Content-Security-Policy nonce

packages/react-use-intercom/package.json

@@ -94,4 +94,4 @@
     "tsup": "^8.3.6",
     "typescript": "^5.7.3"
   }
-}
+}

packages/react-use-intercom/src/initialize.ts

@@ -7,10 +7,11 @@
  *
  * @param appId - Intercom app id
  * @param [timeout=0] - Amount of milliseconds that the initialization should be delayed, defaults to 0
+ * @param [cspNonce=undefined] - Content-Security-Policy nonce to use for the Intercom <script> tag during initializing
  *
  * @see {@link https://developers.intercom.com/installing-intercom/docs/basic-javascript}
  */
-const initialize = (appId: string, timeout = 0) => {
+const initialize = (appId: string, timeout: number = 0, cspNonce?: string) => {
   var w = window;
   var ic = w.Intercom;
   if (typeof ic === 'function') {
@@ -31,6 +32,7 @@ const initialize = (appId: string, timeout = 0) => {
         var s = d.createElement('script');
         s.type = 'text/javascript';
         s.async = true;
+        if (cspNonce) s.nonce = cspNonce;
         s.src = 'https://widget.intercom.io/widget/' + appId;
         var x = d.getElementsByTagName('script')[0];
         x.parentNode.insertBefore(s, x);

packages/react-use-intercom/src/provider.tsx

@@ -28,6 +28,7 @@ export const IntercomProvider: React.FC<
   shouldInitialize = !isSSR,
   apiBase,
   initializeDelay,
+  cspNonce,
   ...rest
 }) => {
   const isBooted = React.useRef(false);
@@ -101,8 +102,8 @@ export const IntercomProvider: React.FC<
     ],
   );
 
-  if (!isSSR && shouldInitialize && !isInitialized.current) {
-    initialize(appId, initializeDelay);
+    if (!isSSR && shouldInitialize && !isInitialized.current) {
+      initialize(appId, initializeDelay, cspNonce);
 
     if (autoBoot) {
       boot(autoBootProps);

packages/react-use-intercom/src/types.ts

@@ -521,4 +521,8 @@ export type IntercomProviderProps = {
    * Pass properties to `boot` method when `autoBoot` is `true`
    */
   autoBootProps?: IntercomProps;
+  /**
+   * Content-Security-Policy nonce to use for the Intercom <script> tag during initializing
+   */
+  cspNonce?: string;
 };