From 62f31f948c5185d7470d65c11c4b90b3353745cc Mon Sep 17 00:00:00 2001
From: breken <support@brekfuz.com>
Date: Thu, 3 Sep 2026 01:45:40 -0700
Subject: [PATCH 1/2] fix(react-router): inject head() src scripts once, not on
 every navigation (#8226)

---
 packages/react-router/src/Asset.tsx | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/packages/react-router/src/Asset.tsx b/packages/react-router/src/Asset.tsx
index 5e4f159f526..4660340fb42 100644
--- a/packages/react-router/src/Asset.tsx
+++ b/packages/react-router/src/Asset.tsx
@@ -159,6 +159,14 @@ function Script({
     )
   }
 
+  // `attrs` is rebuilt as a fresh object on every head-tag computation, so
+  // keying this effect off object identity removes and re-injects `src`
+  // scripts on every navigation that changes head tags - re-executing
+  // third-party scripts (analytics, tag managers, widgets) each time.
+  // Serialize to a stable key so the effect only re-runs when the script
+  // actually changes.
+  const attrsKey = JSON.stringify(attrs ?? null)
+
   React.useEffect(() => {
     if (dataScript) return
 
@@ -217,7 +225,8 @@ function Script({
     }
 
     return undefined
-  }, [attrs, children, dataScript])
+    // eslint-disable-next-line react-hooks/exhaustive-deps
+  }, [attrsKey, children, dataScript])
 
   // --- Server rendering ---
   if (isServer ?? router.isServer) {

From 810ff7a8ae7adbf0bae610790bec501c99dbb312 Mon Sep 17 00:00:00 2001
From: breken <support@brekfuz.com>
Date: Thu, 3 Sep 2026 01:45:41 -0700
Subject: [PATCH 2/2] test(react-router): head() src scripts are not
 re-injected on client-side navigations (#8226)

---
 .../tests/head-script-src-navigation.test.tsx | 105 ++++++++++++++++++
 1 file changed, 105 insertions(+)
 create mode 100644 packages/react-router/tests/head-script-src-navigation.test.tsx

diff --git a/packages/react-router/tests/head-script-src-navigation.test.tsx b/packages/react-router/tests/head-script-src-navigation.test.tsx
new file mode 100644
index 00000000000..f801642dcd1
--- /dev/null
+++ b/packages/react-router/tests/head-script-src-navigation.test.tsx
@@ -0,0 +1,105 @@
+import { createPortal } from 'react-dom'
+import {
+  cleanup,
+  fireEvent,
+  render,
+  screen,
+  waitFor,
+} from '@testing-library/react'
+import { afterEach, expect, test, vi } from 'vitest'
+import {
+  HeadContent,
+  Link,
+  Outlet,
+  RouterProvider,
+  createMemoryHistory,
+  createRootRoute,
+  createRoute,
+  createRouter,
+} from '../src'
+
+afterEach(() => {
+  cleanup()
+  document.head.innerHTML = ''
+  vi.restoreAllMocks()
+})
+
+// A head() script with `src` must be injected (and therefore executed) exactly
+// once. Before the fix, the injection effect keyed off the `attrs` object
+// identity, which changes on every navigation that rebuilds head tags - so
+// the script was removed and re-injected (re-executed) on every navigation.
+test('head() scripts with src are not re-injected on client-side navigations', async () => {
+  const rootRoute = createRootRoute({
+    head: () => ({
+      scripts: [{ src: '/track-test.js' }],
+    }),
+    component: () => (
+      <>
+        {createPortal(<HeadContent />, document.head)}
+        <Link to="/">index</Link>
+        <Link to="/pool/$id" params={{ id: '123' }}>
+          pool
+        </Link>
+        <Outlet />
+      </>
+    ),
+  })
+  const indexRoute = createRoute({
+    getParentRoute: () => rootRoute,
+    path: '/',
+    head: () => ({ meta: [{ title: 'Home Page' }] }),
+    component: () => <div data-testid="index-page">index</div>,
+  })
+  const poolRoute = createRoute({
+    getParentRoute: () => rootRoute,
+    path: '/pool/$id',
+    head: () => ({ meta: [{ title: 'Pool Detail' }] }),
+    component: () => <div data-testid="pool-page">pool</div>,
+  })
+  const router = createRouter({
+    routeTree: rootRoute.addChildren([indexRoute, poolRoute]),
+    history: createMemoryHistory({ initialEntries: ['/'] }),
+  })
+
+  const injections: Array<HTMLScriptElement> = []
+  const removals: Array<HTMLScriptElement> = []
+  const originalAppendChild = document.head.appendChild.bind(document.head)
+  vi.spyOn(document.head, 'appendChild').mockImplementation((node: any) => {
+    if (
+      node instanceof HTMLScriptElement &&
+      node.getAttribute('src') === '/track-test.js'
+    ) {
+      injections.push(node)
+    }
+    return originalAppendChild(node)
+  })
+  vi.spyOn(HTMLScriptElement.prototype, 'remove').mockImplementation(
+    function (this: HTMLScriptElement) {
+      if (this.getAttribute('src') === '/track-test.js') {
+        removals.push(this)
+      }
+      // Element.prototype.remove
+      this.parentNode?.removeChild(this)
+    },
+  )
+
+  render(<RouterProvider router={router} />)
+  expect(await screen.findByTestId('index-page')).toBeInTheDocument()
+  await waitFor(() => expect(document.title).toBe('Home Page'))
+  expect(injections).toHaveLength(1)
+
+  fireEvent.click(screen.getByRole('link', { name: 'pool' }))
+  expect(await screen.findByTestId('pool-page')).toBeInTheDocument()
+  await waitFor(() => expect(document.title).toBe('Pool Detail'))
+
+  fireEvent.click(screen.getByRole('link', { name: 'index' }))
+  expect(await screen.findByTestId('index-page')).toBeInTheDocument()
+  await waitFor(() => expect(document.title).toBe('Home Page'))
+
+  // Every re-injection re-executes the script in a real browser.
+  expect(injections).toHaveLength(1)
+  expect(removals).toHaveLength(0)
+  expect(
+    document.head.querySelectorAll('script[src="/track-test.js"]'),
+  ).toHaveLength(1)
+})