Peter Foster 683b701655 fix: add unsafe-inline back to style-src CSP ...

style-src without unsafe-inline blocks all inline style= attributes,
breaking logo sizing, section layouts, and any element with inline CSS.
script-src retains nonces for actual XSS protection — style-src unsafe-inline
is safe and necessary for the sites inline styling patterns.

2026-03-22 19:26:22 +00:00

72 KiB

Raw Blame History

View Raw