6 Commits

Include renames

Author	SHA1	Message	Date
IllusionandClaude Opus 5.5	709a978da5	feat(web): add Cloudflare Turnstile to the public forms ... Render the widget on the contact, event registration and both application forms, and verify the token with Siteverify in each action before anything is written to the CMS. Verification fails closed. The check is off unless both TURNSTILE_SITE_KEY and TURNSTILE_SECRET_KEY are set. Allow challenges.cloudflare.com in script-src and frame-src. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>	2026-10-24 12:05:51 +02:00
Illusion	274ca6f5ca	fix(web): nonce Google tag loader	2026-10-16 00:27:16 +02:00
Illusion	4afc510fcc	fix(web): add nonce-based CSP ... Generate a per-response nonce for SSR scripts instead of permitting arbitrary inline scripts. Allow only required analytics and configured CMS media origins.	2026-10-15 23:44:56 +02:00
Illusion	8e502b4a01	feat: google analytics	2026-09-27 12:18:31 +02:00
Illusion	2663d7eac6	feat: theme toggle	2026-09-23 21:57:24 +02:00
Illusion	20b384039c	initial commit	2026-09-11 02:46:56 +02:00