<feed xmlns='http://www.w3.org/2005/Atom'>
<title>webao/webAO/golden/css/goldenlayout-dark-theme.css, branch master</title>
<subtitle>WebAO fork</subtitle>
<link rel='alternate' type='text/html' href='https://git.sof.beauty/webao/'/>
<entry>
<title>CSP hardening: remove inline styles</title>
<updated>2026-06-06T03:09:27+00:00</updated>
<author>
<name>Osmium Sorcerer</name>
<email>os@sof.beauty</email>
</author>
<published>2026-06-06T02:27:32+00:00</published>
<link rel='alternate' type='text/html' href='https://git.sof.beauty/webao/commit/?id=8bf3cae6ac89de9569a7ec629594954804a2b55a'/>
<id>8bf3cae6ac89de9569a7ec629594954804a2b55a</id>
<content type='text'>
Similar to removal of inline scripts, everything was taken out into the
CSS files, with the same styles applied there directly. This lets us
use `script-src 'self'` in the CSP.

Additionally, serve Golden Layout CSS locally to avoid third-party
connection.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Similar to removal of inline scripts, everything was taken out into the
CSS files, with the same styles applied there directly. This lets us
use `script-src 'self'` in the CSP.

Additionally, serve Golden Layout CSS locally to avoid third-party
connection.
</pre>
</div>
</content>
</entry>
</feed>
