diff --git a/web/middleware.ts b/web/middleware.ts
index 7dae6b7244..b5e3104508 100644
--- a/web/middleware.ts
+++ b/web/middleware.ts
@@ -56,6 +56,7 @@ export function middleware(request: NextRequest) {
     contentSecurityPolicyHeaderValue,
   )
 
+  response.headers.set('x-nonce', nonce)
   response.headers.set(
     'Content-Security-Policy',
     contentSecurityPolicyHeaderValue,