feat(core): nonce-based CSP for all HTML responses#1

Open

all3f0r1 wants to merge 2 commits into

mainfrom

feat/nonce-based-csp

Commits on Apr 22, 2026

feat(core): replace unsafe-inline CSP with per-request nonces

all3f0r1
and
claude
committed
fix(admin): await field mutations before closing modal

all3f0r1
and
claude
committed