mirror of
https://github.com/screentinker/screentinker.git
synced 2026-08-13 13:53:12 -06:00
d82b65059c
The "Dashboard updated. Reload now" toast (fired when /api/version's hash changes after a deploy) used `href="javascript:location.reload()"`. The dashboard CSP is `script-src 'self'` with no 'unsafe-inline', which blocks `javascript:` URIs — so the link was dead: clicking it did nothing but log a CSP violation. Users had to hard-refresh manually. Build the link and attach a real click listener (first-party script, CSP-clean) instead of the inline javascript: href. No behaviour change beyond the link now working; text unchanged. Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| assets | ||
| compare | ||
| css | ||
| guides | ||
| integrations | ||
| js | ||
| legal | ||
| vendor | ||
| 41498e6c84045d9d187f4504c122e54f.txt | ||
| agency.html | ||
| api-docs.html | ||
| index.html | ||
| landing.html | ||
| manifest.json | ||
| robots.txt | ||
| sitemap.xml | ||
| sw-admin.js | ||