sneak/webhooker
1
0
Fork 0
Code Issues 25 Pull Requests 6 Actions 115 Packages Projects Releases Wiki Activity

Load Alpine's CSP build so the UI's directives run (closes #371)
check / check (push) Successful in 3m27s
Details

Browse Source 
Every page's Content-Security-Policy forbids eval, which the standard Alpine.js build needs, so no directive ran in a browser: both add forms on the webhook page showed open, and events in the event log could not be collapsed. The UI now loads Alpine's CSP build (@alpinejs/csp 3.14.9 in 3p/); the policy is unchanged. Each directive names a property or method of a component registered in static/js/app.js (collapsible, targetForm), and each card holds its own x-data. A browser test, built only with the browser tag, loads the webhook page and the event log under the real headers; make test-browser runs it in Docker. New test-only dependency chromedp, which raises golang.org/x/sys to 0.47.0.

Model: opus-5-5
This commit was merged in pull request #411.
This commit is contained in:
clawbot
2026-10-02 16:09:03 +02:00
parent 3e209bfe4e
commit e8379272ae
16 changed files with 626 additions and 56 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Dockerfile.lint
+3 -1
View File
@@ -34,4 +34,6 @@ COPY . .
# `run` silently ignores config keys it does not recognize, so a typo would
# disable a setting without a word. `config verify` is what catches that.
RUN --network=none golangci-lint config verify --config .golangci.yml
RUN --network=none golangci-lint run --config .golangci.yml ./...
# --build-tags browser also lints the browser test, which is built only with
# that tag (make test-browser).
RUN --network=none golangci-lint run --config .golangci.yml --build-tags browser ./...