Spaces:
Sleeping
Sleeping
Commit History
-
fix(auth): fix HTTP/Tailscale login — opt-in HTTPS redirect, CSP nonce propagation
Nyk- Replace unconditional HTTP→HTTPS redirect with opt-in via NEXT_PUBLIC_FORCE_HTTPS=1 - Propagate CSP nonce into forwarded request headers so SSR inline scripts get the nonce - Bind nonce attribute to layout's inline theme script to prevent CSP violations - Extract CSP and browser-security helpers into dedicated modules with tests Closes #308, #309, #311805a069