Jakub Zych f705343904 fix(19.3-06): api-docs CSP allows only nonce-carrying scripts (WR-06) ...

- the two pinned jsDelivr scripts carry the per-request nonce next to
  their SRI hash; script-src holds only the nonce, no host source

2026-10-15 22:28:34 +02:00

7.8 KiB

Raw Blame History

View Raw