2 Commits

Include renames

Author	SHA1	Message	Date
kevinveenbirkenbachandClaude Opus 5	596b10c403	test(lint/csp): demand reason for unsafe-* grants ... unsafe-inline re-admits the inline execution an XSS needs and unsafe-eval re-admits string-to-code, so a CSP relaxation must be verified against the running app rather than copied from another role. The new lint requires a nocheck marker plus a Reason on the flag's own line, so a marker cannot drift to the neighbouring directive. The 197 pre-existing grants across 70 roles are checked out with a TODO: they were never verified and still have to be. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>	2026-08-18 23:28:14 +02:00
kevinveenbirkenbach	9ee4cd0fb9	Merge branch 'main' of github.com:infinito-nexus/core into feature/swarm-nfs ... # Conflicts: # docs/agents/action/iteration/compose.md # roles/svc-db-openldap/vars/main.yml # roles/svc-runner/defaults/main.yml # roles/svc-runner/tasks/02_cleanup_instance.yml # roles/web-app-discourse/meta/server.yml # roles/web-app-mailu/tasks/01_core.yml # roles/web-app-odoo/tasks/main.yml	2026-07-04 18:16:12 +02:00