feat: CSP compatibility (nonce support) + chart bucket fix#37

Merged

vishaltps merged 16 commits into

mainfrom

feature/csp-compatibility

Apr 20, 2026

Commits on Apr 16, 2026

feat(css): add CSP-compatible utility classes for state toggles
vishaltps
committed
feat(csp): thread nonce through HtmlGenerator and base controller
vishaltps
committed
feat(csp): thread nonce into script-emitting presenters
vishaltps
committed
test(csp): unskip nonce specs — route helpers work at presenter level
vishaltps
committed
refactor(csp): replace .style.* with class toggles in HtmlGenerator scripts
vishaltps
committed
refactor(csp): remove onchange= from chart time-range select
vishaltps
committed
refactor(csp): replace onclick= and window.submit* with event delegation in failed jobs
vishaltps
committed
refactor(csp): replace onclick/onsubmit with data-action delegation in job details
vishaltps
committed
refactor(csp): replace onsubmit=confirm() with data-confirm across presenters
vishaltps
committed
refactor(csp): move prune-all inline onclick to data-confirm-submit dispatcher
vishaltps
committed
test(csp): request spec for no inline handlers and nonce propagation
vishaltps
committed
chore: release 1.3.0 — CSP nonce support
vishaltps
committed
chore(csp): remove redundant style=display:none; on chart tooltip; bump lockfile to 1.3.0
vishaltps
committed

Commits on Apr 20, 2026