Serreau Jovann b075209746 Add tools-security.esy-web.dev to script-src CSP directive ...

Direct script loading requires the domain in script-src,
not just connect-src. Added to both base and prod config.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-03-24 10:01:47 +01:00

..

cert

Add S/MIME certificate, ignore only private key

2026-03-20 16:27:03 +01:00

packages

Add tools-security.esy-web.dev to script-src CSP directive

2026-03-24 10:01:47 +01:00

routes

Add application source code, configs and assets

2026-03-18 20:16:01 +01:00

bundles.php

Full mobile responsive (320px) and tablet (768px) support across all templates

2026-03-20 19:11:02 +01:00

preload.php

Add initial set of files

2026-03-04 21:52:21 +01:00

reference.php

Fix SonarQube issues, store sessions in Redis, use direct analytics URLs

2026-03-24 09:21:19 +01:00

routes.yaml

Add initial set of files

2026-03-04 21:52:21 +01:00

services.yaml

Complete TASK_CHECKUP: security, UX, tests, coverage, accessibility, config externalization

2026-03-23 11:14:06 +01:00