Graham McIntire
833de33622
unpkg.com fetches were intermittently failing in production, leaving the /sites-map page without a working map. Vendoring Leaflet (JS, CSS, marker/layer images) under priv/static/vendor/leaflet/ removes the runtime CDN dependency, the matching CSP relaxation, and the SRI hash churn on future updates. Add 'vendor' to ToweropsWeb.static_paths/0 so Plug.Static serves the new tree, and revert script-src/style-src to no longer list unpkg.com. connect-src still allows *.tile.openstreetmap.org for tile fetches. |
||
|---|---|---|
| .. | ||
| api_auth.ex | ||
| brute_force_protection.ex | ||
| capture_timezone.ex | ||
| check_policy_consent.ex | ||
| detect_eu_user.ex | ||
| filter_noisy_logs.ex | ||
| graphql_auth.ex | ||
| graphql_introspection.ex | ||
| markdown_negotiation.ex | ||
| mobile_auth.ex | ||
| rate_limit.ex | ||
| remote_ip_logger.ex | ||
| security_headers.ex | ||
| update_session_activity.ex | ||
| webhook_auth.ex | ||