Ferdinand Thiessen 2916e5df7e feat: Provide CSP nonce as <meta> element ...

This way we use the CSP nonce for dynamically loaded scripts.
Important to notice: The CSP nonce must NOT be injected in `content` as
this can lead to value exfiltration using e.g. side-channel attacts (CSS selectors).

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

2024-08-13 10:32:44 +02:00

..

Bootstrap

chore: Add SPDX header

2024-05-13 17:41:36 +02:00

Controller

chore: Add SPDX header

2024-05-13 17:41:36 +02:00

Db

chore: Add SPDX header

2024-05-13 17:41:36 +02:00

DependencyInjection

chore: Add SPDX header

2024-05-13 17:41:36 +02:00

Http

test: Adjust tests for CSP nonce

2024-08-13 10:06:32 +02:00

Middleware

feat: Provide CSP nonce as <meta> element

2024-08-13 10:32:44 +02:00

OCS

chore: Add SPDX header

2024-05-13 17:41:36 +02:00

Routing

chore: Add SPDX header

2024-05-13 17:41:36 +02:00

Services

chore: Add SPDX header

2024-05-13 17:41:36 +02:00

Utility

chore: Add SPDX header

2024-05-13 17:41:36 +02:00

AppTest.php

chore: Add SPDX header

2024-05-13 17:41:36 +02:00