fen 1cd333e1e6 use data: URI for image preview: CSP img-src only allows self+data, blob: would be blocked (#171)

2026-09-10 11:19:01 -05:00

..

static

use data: URI for image preview: CSP img-src only allows self+data, blob: would be blocked (#171)

2026-09-10 11:19:01 -05:00

templates

file upload preview in editor on /new (#171)

2026-09-10 11:08:02 -05:00

csp_noinline_test.go

Fix #139: drop unsafe-inline from script-src and style-src (#139)

2026-09-10 09:08:17 -05:00

securityheaders_test.go

Fix #139: drop unsafe-inline from script-src and style-src (#139)

2026-09-10 09:08:17 -05:00

version.go

minor fixes: version label (#93), view dedupe tests (#95)

2026-09-09 16:40:53 -05:00

web_test.go

Theme pairs with dark mode toggle, gear active state, PALETTE_DEFAULT_DARK (#127)

2026-09-09 22:17:50 -05:00

web.go

Fix #139: drop unsafe-inline from script-src and style-src (#139)

2026-09-10 09:08:17 -05:00