Skip to content

v0.0.4: CSP nonce support

Latest

Choose a tag to compare

@tedydonel tedydonel released this 27 Aug 14:32
· 2 commits to master since this release

What's Changed

Added

  • CSP nonce support for inline styles and scripts. Heisenberg now reads the CSP nonce from Vite::useCspNonce() (when available) and adds nonce="..." to every inline <style>, <script>, and <link rel="stylesheet"> tag. This allows Heisenberg to work correctly in apps that enforce nonce-based Content Security Policy without requiring 'unsafe-inline'.
  • README now includes CSP nonce setup instructions for Laravel apps using Vite.
  • README now includes a complete email system quick-start guide with code examples for registering variables, sending via the mailable, rendering directly, and using the admin batch ZIP export.

Changed

  • All Blade templates updated to emit nonce="{{ heisenberg_csp_nonce() }}" on inline <style>, <script>, and <link rel="stylesheet"> tags.

Upgrade note: After installing v0.0.4, run composer dump-autoload in your host app. If you use CSP nonces, add Vite::useCspNonce() to your service provider's boot() method.