Skip to content

footer 0.4.0: inline newsletter feedback (CSP hash, pit.world) - #252

Merged
ralyodio merged 1 commit into
mainfrom
footer-040
Oct 26, 2026
Merged

ralyodio merged 1 commit into
mainfrom
footer-040

Conversation

@ralyodio

Copy link
Copy Markdown
Contributor

Bumps @profullstack/footer to 0.4.0 (profullstack/footer#12): the newsletter form now says "Email confirmation sent" or "Failed: " inline.

  • script-src (site CSP and OAuth consent CSP): sha256 of the footer's inline wireSubscribe script, computed at boot from the bundled renderer.
  • connect-src and form-action: add https://pit.world.
  • test/site.test.mjs + test/accounts.test.mjs assertions updated; both pass.

🤖 Generated with Claude Code

Bump @profullstack/footer to 0.4.0 so the newsletter form reports
"Email confirmation sent" / "Failed: why" inline. Both CSPs (site and
OAuth consent) get the sha256 of the footer's inline wireSubscribe script
(no 'unsafe-inline'; the footer is a cached string, so no nonce), and
connect-src/form-action allow https://pit.world.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@ralyodio
ralyodio merged commit 834f60f into main Oct 26, 2026
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant