Matt N d33fec9c3f Add a CSP script-src policy with nonce-source and convert more inline event handlers (#2413) ... * Add Content-Security-Policy-Report-Only: script-src 'self' 'nonce-' policy * Use @data-on-click-this to attach inline click event handlers which expect being called with 'this' Only handle ones that don't return a value. * Use @data-on-click to attach inline click event handlers with no args and no return value * Use @data-on-click-true to attach inline click event handlers with 'true' as the only argument * Enforce a script-src CSP on views without inline JS * Convert some onchange attributes to data-on-change		2019-01-16 09:59:58 -05:00
..
config.php	Also have to remove fixed width	2017-12-07 15:20:54 -05:00
control_functions.php	Replace onclick inline event handlers for createPopup (#2410)	2019-01-15 09:01:58 -05:00
export_functions.php	Add a CSP script-src policy with nonce-source and convert more inline event handlers (#2413)	2019-01-16 09:59:58 -05:00
functions.php	Add a CSP script-src policy with nonce-source and convert more inline event handlers (#2413)	2019-01-16 09:59:58 -05:00
timeline_functions.php	tidy up	2018-04-20 13:10:38 -04:00