AgeCommit message (Collapse)AuthorLines
Refresh the server configs and drop `unsafe-inline`Bryce Kwon-17/+15
The inline handlers and the auto-submitting selects are gone, so `script-src` no longer needs it, and t0004 now checks that the three configs pin the same policy.
Rework the response headers in the server configsBryce Kwon-8/+38
Make the server configs complete standalone filesBryce Kwon-22/+38
Reorganize the tree into vendor/ and custom/Bryce Kwon-0/+132