From 8bf3cae6ac89de9569a7ec629594954804a2b55a Mon Sep 17 00:00:00 2001
From: Osmium Sorcerer <os@sof.beauty>
Date: Sat, 6 Jun 2026 02:27:32 +0000
Subject: CSP hardening: remove inline styles

Similar to removal of inline scripts, everything was taken out into the
CSS files, with the same styles applied there directly. This lets us
use `script-src 'self'` in the CSP.

Additionally, serve Golden Layout CSS locally to avoid third-party
connection.
---
 public/index.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'public/index.html')

diff --git a/public/index.html b/public/index.html
index 7970295d..8558d2ba 100644
--- a/public/index.html
+++ b/public/index.html
@@ -107,7 +107,7 @@
     </nav>
     <form id="serverlist_container" class="monocle-enriched">
       <h2>Server List</h2>
-      <div id="ms_error" class="error" style="display: none">
+      <div id="ms_error" class="error">
         <p>Could not connect to the master server.</p>
         <p>Showing saved list.</p>
       </div>
-- 
cgit