Ferdinand Thiessen 2916e5df7e feat: Provide CSP nonce as <meta> element ... This way we use the CSP nonce for dynamically loaded scripts. Important to notice: The CSP nonce must NOT be injected in `content` as this can lead to value exfiltration using e.g. side-channel attacts (CSS selectors). Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>		2024-08-13 10:32:44 +02:00
..
composer	feat: Make ISharedStorage public API and reuse where possible	2024-08-12 11:42:10 +02:00
l10n	Fix(l10n): Update translations from Transifex	2024-08-13 00:20:11 +00:00
private	feat: Provide CSP nonce as <meta> element	2024-08-13 10:32:44 +02:00
public	test: Adjust tests for CSP nonce	2024-08-13 10:06:32 +02:00
autoloader.php	chore: Add SPDX header	2024-05-24 13:11:22 +02:00
base.php	fix(session): Log when session_* calls are slow	2024-08-07 09:02:10 +02:00
versioncheck.php	chore: Add SPDX header	2024-05-24 13:11:22 +02:00