mirror of
https://github.com/screentinker/screentinker.git
synced 2026-08-13 13:53:12 -06:00
d82b65059c
The "Dashboard updated. Reload now" toast (fired when /api/version's hash changes after a deploy) used `href="javascript:location.reload()"`. The dashboard CSP is `script-src 'self'` with no 'unsafe-inline', which blocks `javascript:` URIs — so the link was dead: clicking it did nothing but log a CSP violation. Users had to hard-refresh manually. Build the link and attach a real click listener (first-party script, CSP-clean) instead of the inline javascript: href. No behaviour change beyond the link now working; text unchanged. Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| components | ||
| i18n | ||
| views | ||
| agency-portal.js | ||
| api.js | ||
| app.js | ||
| brand-prime.js | ||
| branding.js | ||
| i18n.js | ||
| socket.js | ||
| utils.js | ||