Skip to content

security(web): add Content Security Policy (CSP) and Subresource Inte… - #75

Merged
panayang merged 1 commit into
mainfrom
security/frontend-csp-sri
Oct 26, 2026
Merged

panayang merged 1 commit into
mainfrom
security/frontend-csp-sri

Conversation

@cn-starlabs

Copy link
Copy Markdown
Member

…grity (SRI) hashes

- Consolidates and resolves automated Sentinel PRs #55, #56 (CSP) and #60, #61, #64, #65, #66, #67, #68, #69, #71, #73, #74 (SRI)
- Injects CSP meta tag in web/index.html with 'wasm-unsafe-eval' for Leptos WebAssembly execution and websocket support for Trunk
- Adds SHA-384 SRI integrity hashes and crossorigin attributes to KaTeX stylesheet and scripts on cdn.jsdelivr.net
- Documents security learnings in .jules/sentinel.md

@panayang panayang left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM.

@panayang
panayang merged commit e945dcd into main Oct 26, 2026
8 checks passed
@panayang panayang self-assigned this Oct 26, 2026
@panayang panayang added Complexity Level 1 Complexity Level 1 Emergency Level 1 Emergency Level 1 ai Could be considered for ai assistant enhancement New feature or request rust Pull requests that update rust code labels Oct 26, 2026
@panayang
panayang deleted the security/frontend-csp-sri branch October 26, 2026 03:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ai Could be considered for ai assistant Complexity Level 1 Complexity Level 1 Emergency Level 1 Emergency Level 1 enhancement New feature or request rust Pull requests that update rust code

Development

Successfully merging this pull request may close these issues.

2 participants