nok/wms-app
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Self-host front-end libraries, minimal sign-in header and CSP

Browse Source 
- sign-in pages load only what they use (include_login_header.php, ajax_core.js)
- every library, font and data file served from assets/vendor with pinned
  versions (VERSIONS.json); no CDN at runtime
- Content-Security-Policy on app, sign-in and landing pages
- remove httpbin Dropzone target and source-map references
This commit is contained in:
Thanakorn
2026-09-24 14:53:41 +07:00
parent 8705be0d1b
commit f11af6e949
105 changed files with 3668 additions and 413 deletions
Download Patch File Download Diff File Expand all files Collapse all files
landing/includes/head.php
+1 -1
View File
@@ -12,7 +12,7 @@ $base = $base ?? '/landing';
<title><?= htmlspecialchars($page_title) ?></title>
<!-- Styles -->
<link href="https://fonts.googleapis.com/css2?family=Open+Sans:ital,wght@0,400;0,600;1,400&display=swap" rel="stylesheet">
<link href="<?= $base ?>/webfonts/open-sans/open-sans.css" rel="stylesheet">
<link href="<?= $base ?>/css/bootstrap.min.css" rel="stylesheet">
<link href="<?= $base ?>/css/fontawesome-all.min.css" rel="stylesheet">
<link href="<?= $base ?>/css/swiper.css" rel="stylesheet">