From f82d8abefd37d79a1b6325bdc62f07ef768ba5f3 Mon Sep 17 00:00:00 2001 From: Raghu Betina Date: Fri, 10 Jul 2026 14:08:32 -0500 Subject: [PATCH 1/7] Support strict Content Security Policy --- CHANGELOG.md | 5 +++- .../slash_console/console/index.html.erb | 6 ++-- .../initializers/content_security_policy.rb | 30 +++++++------------ test/integration/navigation_test.rb | 16 ++++++++-- 4 files changed, 32 insertions(+), 25 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index de3b08a..baa1280 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -7,6 +7,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 ## [Unreleased] +### Fixed +- Reuse Rails' per-request Content Security Policy nonce for the console stylesheet and injected web-console assets + ## [0.1.5] - 2025-09-15 ### Fixed @@ -54,4 +57,4 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 - Standard Ruby style guide compliance [Unreleased]: https://github.com/firstdraft/slash_console/compare/v0.1.0...HEAD -[0.1.0]: https://github.com/firstdraft/slash_console/releases/tag/v0.1.0 \ No newline at end of file +[0.1.0]: https://github.com/firstdraft/slash_console/releases/tag/v0.1.0 diff --git a/app/views/slash_console/console/index.html.erb b/app/views/slash_console/console/index.html.erb index 63dca4e..4fe04ad 100644 --- a/app/views/slash_console/console/index.html.erb +++ b/app/views/slash_console/console/index.html.erb @@ -3,7 +3,9 @@ Rails Console -