Release v2.2.2

Release v2.2.2

Changelog

Changed

• CSP: inline <script> / <style> in dashboard/layout.html.twig (dashboard_head, i18n script), dashboard/show.html.twig, dashboard/show_items_reorder.html.twig and the profiler panel Collector/dashboard_menu.html.twig now carry nonce="…" (request attribute csp_nonce; the profiler panel prefers Symfony's csp_script_nonce). dashboard.js copies the nonce onto the icon-selector <script> it injects (new resolveCspNonce() helper in config.ts, with tests); its own <script src> tag in base.html.twig carries the nonce too. Added a template scan test (inline blocks must declare the nonce; no inline event handlers).

Full Changelog: v2.2.1...v2.2.2