What's Changed
Added
- CSP nonce support for inline styles and scripts. Heisenberg now reads the CSP nonce from
Vite::useCspNonce()(when available) and addsnonce="..."to every inline<style>,<script>, and<link rel="stylesheet">tag. This allows Heisenberg to work correctly in apps that enforce nonce-based Content Security Policy without requiring'unsafe-inline'. - README now includes CSP nonce setup instructions for Laravel apps using Vite.
- README now includes a complete email system quick-start guide with code examples for registering variables, sending via the mailable, rendering directly, and using the admin batch ZIP export.
Changed
- All Blade templates updated to emit
nonce="{{ heisenberg_csp_nonce() }}"on inline<style>,<script>, and<link rel="stylesheet">tags.
Upgrade note: After installing v0.0.4, run composer dump-autoload in your host app. If you use CSP nonces, add Vite::useCspNonce() to your service provider's boot() method.