Nuxt · Scripts
NUXT0010Use Nuxt Scripts for third-party scripts
Flags raw third party script tag in Nuxt project code before it leaks into runtime behavior.
vite-doctor/nuxt-scriptsscriptswarnSuggestion
Why it happens
Untrusted HTML and scripts are high-risk rendering surfaces. Keep them explicit, constrained, and routed through framework APIs that encode intent.
Fix
Remove raw third party script tag, or move it to the Nuxt runtime/API that owns that behavior.
Example
Avoid raw third party script tag
Before
useHead({
script: [{ src: 'https://example.com/widget.js' }],
})
After
useHeadSafe({
script: [{ src: trustedWidgetUrl }],
})
Verify the fix
Run only this rule after editing so the report stays focused on the diagnostic you are closing:
pnpm nuxt doctor --rules nuxt-scripts/no-raw-third-party-script-tag