From 8bf3cae6ac89de9569a7ec629594954804a2b55a Mon Sep 17 00:00:00 2001
From: Osmium Sorcerer <os@sof.beauty>
Date: Sat, 6 Jun 2026 02:27:32 +0000
Subject: CSP hardening: remove inline styles

Similar to removal of inline scripts, everything was taken out into the
CSS files, with the same styles applied there directly. This lets us
use `script-src 'self'` in the CSP.

Additionally, serve Golden Layout CSS locally to avoid third-party
connection.
---
 webAO/styles/master.css | 4 ++++
 1 file changed, 4 insertions(+)

(limited to 'webAO/styles/master.css')

diff --git a/webAO/styles/master.css b/webAO/styles/master.css
index add9ed2..c5d9b19 100644
--- a/webAO/styles/master.css
+++ b/webAO/styles/master.css
@@ -379,3 +379,7 @@ nav.navbar.fixed-top.navbar-expand-lg.navbar-dark.bg-dark.fixed-top {
 .server-description {
   white-space: pre-wrap;
 }
+
+#ms_error {
+  display: none;
+}
-- 
cgit