Skip to content

Release v1.1.2

Choose a tag to compare

View all tags
@github-actions github-actions released this 09 Oct 09:05
· 18 commits to master since this release
v1.1.2
dbff944

Release v1.1.2

Changelog

Changed

  • CSP: the inline <script> in admin/base.html.twig now carries nonce="…" from the request attribute csp_nonce when it is set. The submission delete form (admin/submission/show.html.twig) no longer uses an inline onsubmit handler: it declares data-confirm and the admin base script confirms via a delegated submit listener. Added a template scan test (inline blocks must declare the nonce; no inline event handlers).

Full Changelog: v1.1.1...v1.1.2

Assets 2
Loading