From b4cb573e0e9185ccd65281f3b6795551cdcb76e2 Mon Sep 17 00:00:00 2001
From: Alex <cyancyan@outlook.com>
Date: Sun, 10 May 2026 09:23:40 -0400
Subject: [PATCH 1/2] feat: optional `nonce` prop for `NextSSRPlugin`

---
 packages/react/src/next-ssr-plugin.tsx | 11 +++++++++--
 1 file changed, 9 insertions(+), 2 deletions(-)

diff --git a/packages/react/src/next-ssr-plugin.tsx b/packages/react/src/next-ssr-plugin.tsx
index 71339240ef..574d81be08 100644
--- a/packages/react/src/next-ssr-plugin.tsx
+++ b/packages/react/src/next-ssr-plugin.tsx
@@ -9,7 +9,10 @@ declare const globalThis: {
   __UPLOADTHING?: EndpointMetadata;
 };
 
-export function NextSSRPlugin(props: { routerConfig: EndpointMetadata }) {
+export function NextSSRPlugin(props: {
+  routerConfig: EndpointMetadata;
+  nonce?: string;
+}) {
   const id = useId();
 
   // Set routerConfig on server globalThis
@@ -22,7 +25,11 @@ export function NextSSRPlugin(props: { routerConfig: EndpointMetadata }) {
     ];
 
     return (
-      <script key={id} dangerouslySetInnerHTML={{ __html: html.join("") }} />
+      <script
+        key={id}
+        nonce={props.nonce}
+        dangerouslySetInnerHTML={{ __html: html.join("") }}
+      />
     );
   });
 

From 602f2d8d1d8d040b607a8ff652e6be68b48763d8 Mon Sep 17 00:00:00 2001
From: "Mark R. Florkowski" <mark@ping.gg>
Date: Tue, 12 May 2026 14:45:34 -0700
Subject: [PATCH 2/2] Add optional nonce prop for NextSSRPlugin

Add optional `nonce` prop to `NextSSRPlugin` for enhanced security.
---
 .changeset/lazy-lions-reply.md | 5 +++++
 1 file changed, 5 insertions(+)
 create mode 100644 .changeset/lazy-lions-reply.md

diff --git a/.changeset/lazy-lions-reply.md b/.changeset/lazy-lions-reply.md
new file mode 100644
index 0000000000..246f1ca009
--- /dev/null
+++ b/.changeset/lazy-lions-reply.md
@@ -0,0 +1,5 @@
+---
+"@uploadthing/react": patch
+---
+
+feat: optional `nonce` prop for `NextSSRPlugin`