Ferdinand Thiessen 2916e5df7e feat: Provide CSP nonce as <meta> element ...

This way we use the CSP nonce for dynamically loaded scripts.
Important to notice: The CSP nonce must NOT be injected in `content` as
this can lead to value exfiltration using e.g. side-channel attacts (CSS selectors).

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

2024-08-13 10:32:44 +02:00

..

composer

feat: Make ISharedStorage public API and reuse where possible

2024-08-12 11:42:10 +02:00

l10n

Fix(l10n): Update translations from Transifex

2024-08-13 00:20:11 +00:00

private

feat: Provide CSP nonce as <meta> element

2024-08-13 10:32:44 +02:00

public

test: Adjust tests for CSP nonce

2024-08-13 10:06:32 +02:00

autoloader.php

chore: Add SPDX header

2024-05-24 13:11:22 +02:00

base.php

fix(session): Log when session_* calls are slow

2024-08-07 09:02:10 +02:00

versioncheck.php

chore: Add SPDX header

2024-05-24 13:11:22 +02:00