mauriceboe 7cd5a5d04c fix(plugins): allow inline scripts in the sandboxed frame + fix server lint error ...

- Plugin frame CSP: the frame runs at an opaque origin (sandbox without
  allow-same-origin), so script-src 'self' matches nothing and the widget's own
  script never runs (stuck on 'Loading…'). Allow 'unsafe-inline' — the sandbox,
  not this directive, is the isolation boundary, and the plugin author controls
  the frame code either way.
- Fix a no-constant-binary-expression eslint error in registry.test.ts that was
  failing the server lint:check (eslint .) in CI.

2026-07-04 19:11:23 +02:00

..

assets

v3.1.1 bug fixes (#1228)

2026-06-18 20:13:30 +02:00

public

v3.0.16 — bug fixes (#964)

2026-05-06 21:38:40 +02:00

scripts

v3.1.1 bug fixes (#1228)

2026-06-18 20:13:30 +02:00

src

fix(plugins): allow inline scripts in the sandboxed frame + fix server lint error

2026-07-04 19:11:23 +02:00

tests

fix(plugins): allow inline scripts in the sandboxed frame + fix server lint error

2026-07-04 19:11:23 +02:00

.env.example

fix(setup): warn when ADMIN_EMAIL/ADMIN_PASSWORD are ignored, ship reset-admin

2026-06-28 11:10:40 +02:00

.gitignore

Release 3.1.0 (#1185)

2026-06-16 22:22:45 +02:00

.prettierrc

Release 3.1.0 (#1185)

2026-06-16 22:22:45 +02:00

eslint.config.mjs

Release 3.1.0 (#1185)

2026-06-16 22:22:45 +02:00

package.json

feat(extract): extract data using LLM

2026-06-28 11:53:19 +02:00

reset-admin.js

fix(setup): warn when ADMIN_EMAIL/ADMIN_PASSWORD are ignored, ship reset-admin

2026-06-28 11:10:40 +02:00

tsconfig.build.json

Release 3.1.0 (#1185)

2026-06-16 22:22:45 +02:00

tsconfig.json

Release 3.1.0 (#1185)

2026-06-16 22:22:45 +02:00

vitest.config.ts

feat(plugins): isolated per-plugin runtime + capability RPC (M1)

2026-07-04 19:11:23 +02:00