Remove PKCE plain method support (S256 only), enforce openid scope requirement, filter to supported scopes, strip reserved claims from custom claims as defense-in-depth, sanitize SVG icons with Loofah, add global input padding, switch session cookies to SameSite=Lax, use Session.active scope, and remove unsafe-eval from CSP. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
30 lines
841 B
CSS
30 lines
841 B
CSS
@import "tailwindcss";
|
|
@plugin "@tailwindcss/forms";
|
|
@custom-variant dark (&:where(.dark, .dark *));
|
|
|
|
@layer base {
|
|
input:where([type="text"], [type="email"], [type="password"], [type="number"], [type="url"], [type="tel"], [type="search"]),
|
|
textarea,
|
|
select {
|
|
padding: 0.5rem 0.75rem;
|
|
}
|
|
|
|
.dark input:where([type="text"], [type="email"], [type="password"], [type="number"], [type="url"], [type="tel"], [type="search"]),
|
|
.dark textarea,
|
|
.dark select {
|
|
background-color: var(--color-gray-800);
|
|
border-color: var(--color-gray-600);
|
|
color: var(--color-gray-100);
|
|
}
|
|
|
|
.dark input::placeholder,
|
|
.dark textarea::placeholder {
|
|
color: var(--color-gray-400);
|
|
}
|
|
|
|
.dark input:where([type="checkbox"], [type="radio"]) {
|
|
background-color: var(--color-gray-700);
|
|
border-color: var(--color-gray-500);
|
|
}
|
|
}
|