4 commits

Author	SHA1	Message	Date
Frédéric Guillot	dd3f496d06	Avoid extra HTTP request for fetching custom stylesheet ... Use inline CSS with a nonce and move CSP headers to a meta tag.	2021-05-31 14:29:33 -07:00
Frédéric Guillot	864dd9f219	Allow images with data URLs ... Only URLs with a mime-type image/* are allowed	2021-02-06 14:46:01 -08:00
Savely Krasovsky	454eb590ce	Remove child-src CSP policy (deprecated)	2020-03-31 19:50:25 -07:00
Frédéric Guillot	1f58b37a5e	Refactor HTTP response builder	2018-10-08 15:31:58 -07:00