Repository navigation
Release v1.22.3
Release v1.22.3
Changelog
Changed
- CSP: the inline
<script>blocks in_device_intelligence_assets.html.twigand_registration_submit.html.twignow carrynonce="…"from the request attributecsp_noncewhen it is set, so they run under a nonce-basedscript-srcwithout template overrides. Added a template scan test (inline blocks must declare the nonce; no inline event handlers).
Full Changelog: v1.22.2...v1.22.3