feat: improve security headers and csp nonce handling

2026-07-08 07:33:40 +04:00
parent 05d01fb7bc
commit 3e249bbc34
11 changed files with 62 additions and 42 deletions
@@ -18,7 +18,7 @@ function addPWAHeaders() {
 function addPWAScripts() {
    ?>
    <!-- PWA Service Worker -->
-    <script>
+    <script nonce="<?php echo getCspNonce(); ?>">
        if ('serviceWorker' in navigator) {
            window.addEventListener('load', function() {
                navigator.serviceWorker.register('/sw.js')