Load Alpine's CSP build so the UI's directives run (closes #371)

Browse Source

The pages' Content-Security-Policy forbids eval, which the standard
Alpine.js build needs, so no directive ran: add forms showed open and
events never collapsed. 3p/ now holds the @alpinejs/csp 3.14.9 tarball
instead, and every directive in templates/ names a property or method
of a component registered in static/js/app.js, as that build requires.
The policy is unchanged.

A headless Chromium test in internal/server loads the webhook page and
the event log under the real headers. The Dockerfile's test stage
installs chromium; where it is missing the test skips.

Model: opus-5-5

...

This commit is contained in:

sneak

2026-10-01 21:21:12 +00:00

parent 9d29baaa2d

commit 81bac1aa3e

12 changed files with 422 additions and 48 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

3p/alpinejs-3.14.9.tgz

BIN

Binary file not shown.

3p/alpinejs-csp-3.14.9.tgz

BIN

Binary file not shown.