feat: support CSP by adding optional nonce

[furisake]

Overview

• This adds support for Content Security Policy (CSP) by optionally attaching a nonce to <style> tags.
• This change is does not break any existing code.

Why

• To support strict CSP configurations where style-src requires a per-response nonce instead of 'unsafe-inline'.

Related Issues:

• [bug] CSP Headers cause issues #2284
• [bug] RainbowKit CSS styling not loading when using 'self' in Content Security Policy on Vercel #1256

Changes

• RainbowKitProvider now accepts an optional nonce?: string.
• The nonce is applied to relevant <style> tags and passed to react-remove-scroll via get-nonce library (See: Violates safe CSPs because of dependency applying style tags theKashey/react-remove-scroll#21).

Usage

You can now optionally pass a nonce prop to RainbowKitProvider:

- <RainbowKitProvider>
+ <RainbowKitProvider nonce={nonce}>
  ...
  </RainbowKitProvider>

Note

The nonce must be generated per HTTP response by your server (do not hard-code).
See Next.js CSP guide for an example.

---

PR-Codex overview

This PR introduces support for Content Security Policy (CSP) by adding an optional nonce parameter to various modal components in the rainbowkit package, enhancing security for inline styles.

Detailed summary

• Updated package.json to include get-nonce dependency.
• Added nonce prop to AccountModal, ChainModal, RainbowKitProvider, ModalProvider, Dialog, and ConnectModal.
• Integrated setNonce function from get-nonce in Dialog component.
• Updated change log with CSP support details.

✨ Ask PR-Codex anything about this PR by commenting with /codex {your question}

[changeset-bot]

🦋 Changeset detected

Latest commit: 0ca137d

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 19 packages

Name	Type
@rainbow-me/rainbowkit	Minor
example	Patch
@rainbow-me/rainbow-button	Patch
@rainbow-me/rainbowkit-siwe-next-auth	Major
rainbowkit-next-app	Patch
site	Patch
with-create-react-app	Patch
with-next-app-i18n	Patch
with-next-app	Patch
with-next-custom-button	Patch
with-next-mint-nft	Patch
with-next-siwe-iron-session	Patch
with-next-siwe-next-auth	Patch
with-next-wallet-button	Patch
with-next	Patch
with-react-router	Patch
with-remix	Patch
with-vite	Patch
with-next-rainbow-button	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[vercel]

@furisake is attempting to deploy a commit to the rainbowdotme Team on Vercel.

A member of the Team first needs to authorize it.

[ga-reth]

@DanielSinclair hey, any chance this could be reviewed/merged? would be great to see this in prod!