cupcakearmy 0c33f2f34c feat: enable strict CSP with nonce-based script-src ...

Replaces the disabled CSP middleware with a working implementation:
- Generates a per-request nonce for script-src
- Injects nonce into the inline SvelteKit bootstrap script
- Uses 'strict-dynamic' so dynamically imported modules are trusted
- SPA fallback serves index.html with CSP header

2026-06-25 21:34:25 +01:00

..

src

feat: enable strict CSP with nonce-based script-src

2026-06-25 21:34:25 +01:00

Cargo.lock

chore:bump version

2026-06-25 21:01:10 +01:00

Cargo.toml

chore:bump version

2026-06-25 21:01:10 +01:00

package.json

watchexec & breaking changes in axum 0.8

2026-05-31 22:55:11 +02:00