Simpl-Resultat/src-tauri
le king fu 60b995394e
Some checks are pending
PR Check / rust (push) Waiting to run
PR Check / frontend (push) Waiting to run
PR Check / rust (pull_request) Successful in 17m9s
PR Check / frontend (pull_request) Successful in 2m15s
fix: tighten CSP img-src, show initials instead of external avatar
Privacy-first: remove 'https:' from img-src CSP directive to prevent
IP leaks via external avatar URLs (Google/Gravatar). AccountCard now
shows user initials instead of loading a remote image.

Also remove .keys-temp/ from .gitignore (not relevant to this PR).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-10 15:24:52 -04:00
..
capabilities feat: add Settings page with in-app updater support 2026-02-11 11:47:25 +00:00
icons Initial project scaffold: Tauri v2 + React + TypeScript + TailwindCSS v4 2026-02-07 11:05:11 +00:00
src fix: restrict last_check file perms + add useAuth to architecture docs 2026-04-10 15:14:31 -04:00
.gitignore Initial project scaffold: Tauri v2 + React + TypeScript + TailwindCSS v4 2026-02-07 11:05:11 +00:00
build.rs Initial project scaffold: Tauri v2 + React + TypeScript + TailwindCSS v4 2026-02-07 11:05:11 +00:00
Cargo.lock fix: use base64 crate, restrict token file perms, safer chrono_now 2026-04-10 14:58:10 -04:00
Cargo.toml fix: use base64 crate, restrict token file perms, safer chrono_now 2026-04-10 14:58:10 -04:00
tauri.conf.json fix: tighten CSP img-src, show initials instead of external avatar 2026-04-10 15:24:52 -04:00