Thanakorn f11af6e949 Self-host front-end libraries, minimal sign-in header and CSP ...

- sign-in pages load only what they use (include_login_header.php, ajax_core.js)
- every library, font and data file served from assets/vendor with pinned
  versions (VERSIONS.json); no CDN at runtime
- Content-Security-Policy on app, sign-in and landing pages
- remove httpbin Dropzone target and source-map references

2026-09-24 14:53:41 +07:00

8.5 KiB

Raw History

View Raw