rmcampos/tasknote
1
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

fix(csp): allow blocked inline style via SHA-256 hash in style-src (#43)

Browse Source 
* Initial plan

* fix: add CSP hash for blocked inline style in style-src directive

Agent-Logs-Url: https://github.com/RMCampos/tasknote/sessions/a51fd5ff-eb93-4ef0-96e0-3d10df540a59

Co-authored-by: RMCampos <2219519+RMCampos@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: RMCampos <2219519+RMCampos@users.noreply.github.com>
This commit is contained in:
Copilot
2026-05-06 18:37:02 -03:00
committed by GitHub
co-authored by copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> RMCampos
parent fc4cd38f88
commit 39e5ac5b42
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
client/Caddyfile
+1 -1
View File
@@ -34,7 +34,7 @@
media-src 'self';
object-src 'none';
script-src 'unsafe-inline' 'report-sample' 'self' https://*.cloudfront.net;
style-src 'report-sample' 'self' https://cdn.jsdelivr.net/ https://fonts.googleapis.com;
style-src 'report-sample' 'self' https://cdn.jsdelivr.net/ https://fonts.googleapis.com 'sha256-+OsIn6RhyCZCUkkvtHxFtP0kU3CGdGeLjDd9Fzqdl3o=';
worker-src 'none';
"
Referrer-Policy "same-origin"