Skip to content

Security: harden CSP and update Sharp with synchronized npm lockfile #37

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
AstroMyth101 merged 22 commits into from
Oct 12, 2026
Merged

Security: harden CSP and update Sharp with synchronized npm lockfile #37

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
22 commits
Select commit Hold shift + click to select a range
83e30eb
security: pin patched sharp with npm overrides
AstroMyth101 Oct 12, 2026
0c7a7c1
security: disallow inline JavaScript in CSP
AstroMyth101 Oct 12, 2026
6d44ffc
security: externalize early theme initialization
AstroMyth101 Oct 12, 2026
2418cdc
ci: temporarily generate npm lockfile for security update
AstroMyth101 Oct 12, 2026
d825efe
security: regenerate npm lockfile for patched sharp
AstroMyth101 Oct 12, 2026
9ab7850
ci: restore standard npm clean-install build workflow
AstroMyth101 Oct 12, 2026
a24332a
ci: temporarily audit dependencies and verify browser test capability
AstroMyth101 Oct 12, 2026
cfecb2c
test: temporarily smoke-test generated site under Chromium
AstroMyth101 Oct 12, 2026
f9f3576
ci: restore original workflow after security audit and Chromium smoke…
AstroMyth101 Oct 12, 2026
2a98d85
test: add temporary PR37 interactive browser regression harness
AstroMyth101 Oct 12, 2026
f124462
ci: temporarily run interactive Chromium security, theme and image va…
AstroMyth101 Oct 12, 2026
f2e408e
ci: temporarily execute browser regression harness for PR37
AstroMyth101 Oct 12, 2026
68be28a
test: bound persisted theme reload validation without iframe onload race
AstroMyth101 Oct 12, 2026
d4ff7c0
test: use independent iframe for theme persistence check
AstroMyth101 Oct 12, 2026
76fc607
test: rerun single Chromium validation with longer budget
AstroMyth101 Oct 12, 2026
282854a
ci: restore baseline after exploratory browser tests
AstroMyth101 Oct 12, 2026
a0e6243
test: remove temporary PR37 browser harness
AstroMyth101 Oct 12, 2026
f0d0034
test: stage temporary Playwright integration regression suite
AstroMyth101 Oct 12, 2026
5378852
ci: temporarily execute Playwright browser checks on PR37
AstroMyth101 Oct 12, 2026
4d40439
test: open mobile menu before clicking project navigation link
AstroMyth101 Oct 12, 2026
0d24b37
ci: restore standard workflow after passing Playwright tests
AstroMyth101 Oct 12, 2026
09512b6
test: remove temporary Playwright regression harness after validation
AstroMyth101 Oct 12, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Loading
Loading