Use Content-Security-Policy: script nonce (#37232)

Fix #305
2026-09-08 22:13:26 +09:00 · 2026-04-15 20:07:57 +00:00
parent 2644bb8490
commit 82bfde2a37
18 changed files with 134 additions and 52 deletions
@@ -1,4 +1,4 @@
-<script type="module">
+<script nonce="{{ctx.CspScriptNonce}}" type="module">
 const data = {
 	...window.config.pageData.dashboardRepoList, // it only contains searchLimit and uid