dcb80ac250
Introduces a new content security policy header for responses to all requests to reduce the possibility of ip leaks to outside connections. By default blocks all inline scripts, and only allows content loaded from Whoogle. Refactors a few small inline scripting cases in the project to their own individual scripts. |
||
|---|---|---|
| .. | ||
| autocomplete.js | ||
| controller.js | ||
| header.js | ||
| keyboard.js | ||
| utils.js | ||