Content Security Policy (CSP) compatibility beta.

2026-06-20 00:21:19 +02:00
parent 0b76255cfa
commit 8b742d997c
68 changed files with 1632 additions and 1421 deletions
--- a/pub/login/mfaSetup.php
+++ b/pub/login/mfaSetup.php
@@ -54,9 +54,6 @@ $_SESSION['mfasetup']['secret'] = $secret;
    <link rel="apple-touch-icon" sizes="180x180" href="/src/images/favicon/apple-touch-icon.png">
    <link rel="manifest" href="/src/images/favicon/site.webmanifest">

-    <style>
-    </style>
-
    <link rel="stylesheet" href="css/style.full.css" as="style">
 </head>
 <body>
--- a/pub/login/php/authFunctions.php
+++ b/pub/login/php/authFunctions.php
@@ -24,13 +24,9 @@ function addLoginAttempts()
 }

 function setTimeZoneCookie()
-{
-    ?>
-    <script>
-        document.cookie = "user_timezone=" + Intl.DateTimeFormat().resolvedOptions().timeZone + "; path=/";
-    </script>
-    <?php
-}
+{ ?>
+    <script src="/src/js/timeZoneCookie.js"></script>
+<?php }

 function getUserTimezone()
 {
--- a/pub/login/resetPassword.php
+++ b/pub/login/resetPassword.php
@@ -143,7 +143,7 @@ if (checkLoginAttempts() > 20) {
                    <div class="card col-md-5 text-white bg-transparent py-5">
                        <div class="card-body text-center pt-5">
                            <div>
-                                <img class="pt-3 w-100 portal-image" alt="portal-image" src="/src/images/logo-login-dark.webp" width="500" height="265" style="height: auto;">
+                                <img class="pt-3 w-100 portal-image" alt="portal-image" src="" width="500" height="265" style="height: auto;">
                            </div>
                        </div>
                    </div>