docfast/templates
DocFast Dev 4aeac959c3
All checks were successful
Build & Deploy to Staging / Build & Deploy to Staging (push) Successful in 10m51s
Fix CSP-blocked inline onclick handlers
- Remove onclick from API key recovery modal Copy button (templates/pages/index.html)
- Event listener already exists in app.js (line 295)
- Remove onclick from server-rendered API key display (src/index.ts line 207)
- Remove onclick from billing success page Copy button (src/routes/billing.ts line 181)
- Create public/copy-helper.js to handle all [data-copy] elements via external JS
- All copy functionality now CSP-compliant (script-src 'self')
2026-02-21 16:04:15 +00:00
..
pages Fix CSP-blocked inline onclick handlers 2026-02-21 16:04:15 +00:00
partials security: remove Change Email feature (leaked key = account hijack) 2026-02-17 11:40:27 +00:00