feat: improve security headers and csp nonce handling

2026-07-08 07:33:40 +04:00
parent 05d01fb7bc
commit 3e249bbc34
11 changed files with 62 additions and 42 deletions
@@ -57,7 +57,7 @@ setSecurityHeaders();
    <meta name="twitter:image" content="<?php echo 'https://' . $_SERVER['HTTP_HOST'] . '/img/logo.png'; ?>">

    <!-- Configuration JavaScript -->
-    <script>
+    <script nonce="<?php echo getCspNonce(); ?>">
        const COUNTDOWN_TARGET_DATE = '<?php echo defined('COUNTDOWN_TARGET_DATE') ? COUNTDOWN_TARGET_DATE : '2025-10-11 00:00:00'; ?>';
    </script>
 </head>