Graham McIntire
833de33622
unpkg.com fetches were intermittently failing in production, leaving the /sites-map page without a working map. Vendoring Leaflet (JS, CSS, marker/layer images) under priv/static/vendor/leaflet/ removes the runtime CDN dependency, the matching CSP relaxation, and the SRI hash churn on future updates. Add 'vendor' to ToweropsWeb.static_paths/0 so Plug.Static serves the new tree, and revert script-src/style-src to no longer list unpkg.com. connect-src still allows *.tile.openstreetmap.org for tile fetches. |
||
|---|---|---|
| .. | ||
| channels | ||
| components | ||
| controllers | ||
| graphql | ||
| helpers | ||
| live | ||
| plugs | ||
| changelog_parser.ex | ||
| endpoint.ex | ||
| gettext.ex | ||
| gettext_helpers.ex | ||
| graphql_socket.ex | ||
| permissions.ex | ||
| plug_exceptions.ex | ||
| remote_ip.ex | ||
| router.ex | ||
| scoped_resource.ex | ||
| telemetry.ex | ||
| telemetry_filter.ex | ||
| user_auth.ex | ||