Graham McIntire a1e601563e fix: allow leaflet CDN and OSM tiles in CSP ... The /sites-map page loads leaflet from unpkg.com (CSS + JS) and fetches tiles from *.tile.openstreetmap.org. Update Content-Security-Policy to permit those origins so the map can render. Adds: - script-src https://unpkg.com (leaflet.js) - style-src https://unpkg.com (leaflet.css) - connect-src https://*.tile.openstreetmap.org (tile fetches)		2026-05-01 17:03:14 -05:00
..
api_auth.ex	refactor: use API token auth for profile imports instead of session cookies	2026-01-18 09:30:21 -06:00
brute_force_protection.ex	test: improve test coverage and code quality	2026-03-15 14:49:55 -05:00
capture_timezone.ex	Use detected timezone from session in user registration	2026-02-01 12:18:33 -06:00
check_policy_consent.ex	gdpr consent tracking	2026-01-29 11:12:35 -06:00
detect_eu_user.ex	perf: disable Req retry for faster error tests	2026-03-10 16:19:31 -05:00
filter_noisy_logs.ex	fix: properly disable Plug.Telemetry logging for health checks	2026-03-08 16:39:26 -05:00
graphql_auth.ex	perf+refactor: codebase-wide query and antipattern audit	2026-04-28 16:58:51 -05:00
graphql_introspection.ex	Security fixes: mask credentials in logs/API, fix cookie/CSP/LIKE injection/webhooks	2026-02-15 09:09:04 -06:00
markdown_negotiation.ex	fix: correct login URL path in markdown negotiation content	2026-04-17 15:50:31 -05:00
mobile_auth.ex	perf+refactor: codebase-wide query and antipattern audit	2026-04-28 16:58:51 -05:00
rate_limit.ex	chore: rate_limit rewrite + on-call redesign plan + handoff_notifications_mode	2026-04-28 12:17:29 -05:00
remote_ip_logger.ex	perf: disable Req retry for faster error tests	2026-03-10 16:19:31 -05:00
security_headers.ex	fix: allow leaflet CDN and OSM tiles in CSP	2026-05-01 17:03:14 -05:00
update_session_activity.ex	perf+refactor: codebase-wide query and antipattern audit	2026-04-28 16:58:51 -05:00
webhook_auth.ex	Add CI-triggered mass agent update webhook	2026-02-10 13:40:32 -06:00