| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 22 hours | Log CSP violations to their own file instead of relying on Rails.logger | erdgeist | |
| 36 hours | Add a 500er logger and a trip wire in admin/boom to test it | erdgeist | |
| 46 hours | Emit a report-only Content-Security-Policy with nonced inline scripts | erdgeist | |
| - dark-mode restore now travels nonced, the admin constants likewise - AUTH_TOKEN deleted in favour of the csrf meta tag - new report collector at /csp_reports | |||
