Jakub Zych 2343788624 fix(boardwalk): add form-action and frame-src to the admin CSP ...

- form-action 'self': injected markup cannot post a native form off-origin
- frame-src 'none': no framed content; a sandboxed srcdoc preview is not
  fetched and still renders
- header tests, README and admin-spa docs name the directives

2026-10-12 20:41:21 +02:00

..

architecture

feat(sieve): add the remaining collection helpers and docs mentions

2026-10-11 14:27:13 +02:00

backend

fix(boardwalk): add form-action and frame-src to the admin CSP

2026-10-12 20:41:21 +02:00

console

feat(16.3-01): admin:token CLI, party.Activated, READMEs and docs

2026-10-11 01:55:07 +02:00

database

feat(13-01): add the prohibited rule and dated-download and notification masks

2026-10-03 06:32:46 +02:00

examples/blog

fix(16.3): refresh CSRF coverage golden and blog scaffold layout

2026-10-11 13:53:31 +02:00

plugins

feat(17-01): menu item type registry and dependent dropdown binding

2026-10-12 15:09:14 +02:00

services

fix(14.2): WR-04 validate storage.uploads.public_path_prefix at boot

2026-10-12 11:21:38 +02:00

setup

fix(14.2): WR-03 uploads route sandboxes files and downloads non-images

2026-10-12 11:20:43 +02:00

index.md

docs(architecture): add performance and scaling page compared to PHP-FPM

2026-10-01 19:20:46 +02:00

site.yaml

docs(14.3-03): document summer new and the one-command start

2026-10-08 12:08:35 +02:00