ldm0 a9830ab24b fix(csp): reject nonnonceable script elements ...

Apply the shared script nonceability check to parser scripts, buffered preloads and runtime script preparation. Suspicious script attribute names and values must not authorize execution merely because a nonce matches. Includes parser, preload and dynamic-preparation regressions.

The attribute checks follow the [CSP3 nonceability algorithm](https://www.w3.org/TR/CSP3/#is-element-nonceable), including case-insensitive `<link`, `<script` and `<style` matches and parser duplicate attributes.

Validation: all branch checks passed. Summary [ 115.690s] 18925 tests run: 18925 passed (9 slow), 16 skipped

2026-09-29 16:27:50 +08:00

..

classify.rs

Public preview

2026-08-11 00:10:12 +08:00

lib.rs

fix(csp): reject nonnonceable script elements

2026-09-29 16:27:50 +08:00

nonce.rs

fix(csp): reject nonnonceable script elements

2026-09-29 16:27:50 +08:00

scheduling.rs

Public preview

2026-08-11 00:10:12 +08:00