Dan Milne 020759bfb3 Fix invalid require-trusted-types-for CSP directive ...

require-trusted-types-for only accepts 'script'; emitting 'none'
produced an invalid directive that browsers rejected. Omit the
directive entirely to leave Trusted Types unenforced (needed for
WebAuthn). Bump version to 0.16.1.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-21 15:39:35 +10:00

3.1 KiB

Raw Blame History

View Raw