rene/banyaro
1
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fix: restliche CSP-blockierte Inline-Handler — Bild-Fallbacks (globaler data-fb Error-Handler) + Hover-Effekte (CSS-Utilities + data-hover-play)

Browse source 
App ist jetzt vollständig frei von Inline-Event-Handlern (onerror/onmouseenter/etc.).
data-fb Modi: hide/hide-parent/dim-grandparent/sibling/show-el/emoji/initials + data-fb-src.
Hover: .by-hover-lift/-surface2/-surface3 in utilities.css. SW v1165
This commit is contained in:
rene 2026-06-04 16:22:43 +02:00
parent 2ddd8ac350
commit c07b1cc01b
23 changed files with 125 additions and 68 deletions
Download patch file Download diff file Expand all files Collapse all files

24
backend/static/index.html
View file

@ -86,14 +86,14 @@
<title>Ban Yaro</title>
<!-- Theme + theme-color Statusleiste vor CSS setzen -->
<script src="/js/boot-early.js?v=1164"></script>
<script src="/js/boot-early.js?v=1165"></script>
<!-- CSS: Reihenfolge ist wichtig — ?v= zwingt Browser zur Neuladung -->
<link rel="stylesheet" href="/css/design-system.css?v=1164">
<link rel="stylesheet" href="/css/layout.css?v=1164">
<link rel="stylesheet" href="/css/components.css?v=1164">
<link rel="stylesheet" href="/css/utilities.css?v=1164">
<link rel="stylesheet" href="/css/lists.css?v=1164">
<link rel="stylesheet" href="/css/design-system.css?v=1165">
<link rel="stylesheet" href="/css/layout.css?v=1165">
<link rel="stylesheet" href="/css/components.css?v=1165">
<link rel="stylesheet" href="/css/utilities.css?v=1165">
<link rel="stylesheet" href="/css/lists.css?v=1165">
</head>
<body>
@ -617,11 +617,11 @@
<div id="modal-container"></div>
<!-- JS: Reihenfolge ist wichtig — erst Basis, dann Features -->
<script src="/js/api.js?v=1164"></script>
<script src="/js/ui.js?v=1164"></script>
<script src="/js/app.js?v=1164"></script>
<script src="/js/worlds.js?v=1164"></script>
<script src="/js/offline-indicator.js?v=1164"></script>
<script src="/js/api.js?v=1165"></script>
<script src="/js/ui.js?v=1165"></script>
<script src="/js/app.js?v=1165"></script>
<script src="/js/worlds.js?v=1165"></script>
<script src="/js/offline-indicator.js?v=1165"></script>
<!-- Feature-Seiten werden lazy geladen -->
@ -631,7 +631,7 @@
<!-- Boot: Offline-Banner + SW-Registration (extrahiert für CSP) -->
<script src="/js/boot.js?v=1164"></script>
<script src="/js/boot.js?v=1165"></script>
</body>