Update oban_web to 2.12

- Had to disable nonces for style-src directives (seems like they're not
  propagated everywhere in oban_web's templates)
- Doesn't seem to support crons or workflows when backed by SQLite
This commit is contained in:
Claudio Ortolina
2026-03-26 10:09:22 +00:00
parent 70645b078a
commit 1cf9446063
3 changed files with 3 additions and 3 deletions
+1 -1
View File
@@ -185,7 +185,7 @@ defmodule MusicLibraryWeb.Router do
csp =
"default-src 'self'" <>
"; script-src 'self' 'nonce-#{nonce}'" <>
"; style-src 'self' 'unsafe-inline' 'nonce-#{nonce}' https://rsms.me" <>
"; style-src 'self' 'unsafe-inline' https://rsms.me" <>
"; font-src 'self' data: https://rsms.me" <>
"; img-src 'self' data: blob: 'nonce-#{nonce}' #{@img_origins}" <>
"; connect-src 'self' https://fastly.jsdelivr.net" <>