Illusion/sharper.ly
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
43 Commits 2 Branches 0 Tags
master
Commit Graph
7 Commits
Author SHA1 Message Date
IllusionandClaude Opus 5.5 709a978da5 feat(web): add Cloudflare Turnstile to the public forms 
Render the widget on the contact, event registration and both application
forms, and verify the token with Siteverify in each action before anything
is written to the CMS. Verification fails closed. The check is off unless
both TURNSTILE_SITE_KEY and TURNSTILE_SECRET_KEY are set.

Allow challenges.cloudflare.com in script-src and frame-src.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
 2026-10-24 12:05:51 +02:00
Illusion 0b2c8d581f Revert "fix(web): nonce JSON-LD scripts" 
This reverts commit 9119599e45.
 2026-10-16 00:28:51 +02:00
Illusion 274ca6f5ca fix(web): nonce Google tag loader 2026-10-16 00:27:16 +02:00
Illusion 9119599e45 fix(web): nonce JSON-LD scripts 2026-10-16 00:21:33 +02:00
Illusion e6069248b0 fix(web): nonce router stream scripts 2026-10-16 00:02:23 +02:00
Illusion 4afc510fcc fix(web): add nonce-based CSP 
Generate a per-response nonce for SSR scripts instead of permitting arbitrary inline scripts. Allow only required analytics and configured CMS media origins.
 2026-10-15 23:44:56 +02:00
Illusion 20b384039c initial commit 2026-09-11 02:46:56 +02:00