feat: improve security headers and csp nonce handling

2026-07-08 07:33:40 +04:00
parent 05d01fb7bc
commit 3e249bbc34
11 changed files with 62 additions and 42 deletions
@@ -82,7 +82,7 @@ if ($heroType === 'none') {
                    $bgImageStyle = 'background-image: url(\'' . htmlspecialchars(NEXT_LIVE_IMAGE) . '\');';
                }
                ?>
-                <div class="hero-next-live" style="<?php echo $bgImageStyle; ?>">
+                <div class="hero-next-live" style="<?php echo $bgImageStyle; ?>" nonce="<?php echo getCspNonce(); ?>">
                    <?php if (!empty(NEXT_LIVE_IMAGE) && file_exists(NEXT_LIVE_IMAGE)): ?>
                        <div class="hero-next-live-image-container">
                            <img src="<?php echo htmlspecialchars(NEXT_LIVE_IMAGE); ?>"