mark
/
msos
0
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
118 Commits 3 Branches 0 Tags 512 MiB
HTML 94.6%
CSS 2.8%
Python 1.3%
JavaScript 1.3%
Go to file
popovskik 9877b4bbd6 security(.htaccess): enforce Content-Security-Policy (was report-only) 
Switch CSP from Report-Only to enforcing, with an allowlist verified in a
browser against a server sending this exact header (0 violations across the
homepage, a YouTube project page, the assistant, MailerLite JSONP, GA/gtag,
and the Google Forms endpoint).

Adds the sources the old report-only policy was missing (and would have
broken if enforced blindly): Google Fonts (style/font), Font Awesome cdnjs
(style/font), MailerLite newsletter (script/connect), the Google Forms
endpoint in connect-src, plus object-src 'none'. Keeps 'unsafe-inline' for
the in-<head> consent bootstrap; the host allowlists + form-action/base-uri
are the real hardening on top of existing output escaping.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 		2026-08-04 10:48:23 +02:00
.gitea/workflows feat(assistant): v2 — query-language detection, analytics, chips, auto-index 2026-08-04 01:48:39 +02:00
assistant feat: offline in-browser "Ask MSOS" assistant (no API, zero cost) 2026-08-04 01:29:22 +02:00
css health: fix broken pages, add image dimensions, a11y & SEO wins 2026-08-04 00:31:27 +02:00
docs feat(assistant): one-time disclaimer note + GA4 question-report guide 2026-08-04 01:57:55 +02:00
en feat: offline in-browser "Ask MSOS" assistant (no API, zero cost) 2026-08-04 01:29:22 +02:00
images Hub redesign, per-language logos, partner carousel, footer + menu fixes 2026-08-03 14:06:53 +02:00
mk feat: offline in-browser "Ask MSOS" assistant (no API, zero cost) 2026-08-04 01:29:22 +02:00
si feat: offline in-browser "Ask MSOS" assistant (no API, zero cost) 2026-08-04 01:29:22 +02:00
templates Add Student Welcome Guide, legal pages, and working newsletter 2026-07-30 02:17:35 +02:00
tools feat(assistant): v2 — query-language detection, analytics, chips, auto-index 2026-08-04 01:48:39 +02:00
.gitignore security: harden static site (headers, exposed-file cleanup, privacy) 2026-08-03 23:56:48 +02:00
.htaccess security(.htaccess): enforce Content-Security-Policy (was report-only) 2026-08-04 10:48:23 +02:00
404.html feat: offline in-browser "Ask MSOS" assistant (no API, zero cost) 2026-08-04 01:29:22 +02:00
README.md test za actions 2025-08-21 12:22:10 +02:00
apple-touch-icon.png Popravki za homepage 2025-09-09 13:25:10 +02:00
assistant.css feat(assistant): one-time disclaimer note + GA4 question-report guide 2026-08-04 01:57:55 +02:00
assistant.js feat(assistant): one-time disclaimer note + GA4 question-report guide 2026-08-04 01:57:55 +02:00
blog-filter.js Pagination fixes, blog page chooser, Events & Projects redesign 2026-08-01 20:30:47 +02:00
consent.js Add GDPR cookie-consent banner (Consent Mode v2) 2026-08-02 18:30:35 +02:00
export_code.sh Posodobljen mobilni meni 2025-09-04 20:43:28 +02:00
favicon-96x96.png Popravki za homepage 2025-09-09 13:25:10 +02:00
favicon.ico Popravki za homepage 2025-09-09 13:25:10 +02:00
favicon.svg Popravki za homepage 2025-09-09 13:25:10 +02:00
guide-feedback.js Feedback: space/bottom-align Send button; submit No + comment as one row 2026-07-31 12:03:07 +02:00
main.js a11y: make mobile menu toggle keyboard & screen-reader accessible 2026-08-04 00:57:27 +02:00
member-form.js Become a Member: bento benefits, merged/redesigned join form, floating CTA, fixes 2026-08-01 13:14:36 +02:00
my-route.js security: harden static site (headers, exposed-file cleanup, privacy) 2026-08-03 23:56:48 +02:00
news-filter.js News hub: add working pagination that respects the type filter 2026-07-31 23:56:42 +02:00
optimize_images.py Popravki za timeline 2025-09-09 14:21:55 +02:00
robots.txt Add technical SEO foundation, MK/SI about-us + timeline, content fixes 2026-08-02 11:43:10 +02:00
site.webmanifest Popravki za homepage 2025-09-09 13:25:10 +02:00
sitemap.xml Add Gallery page (per-event albums + lightbox); remove video-thumbnail blur 2026-08-03 14:28:53 +02:00
student-guide.js Upgrade Build My Route into a personal report generator with export and data hook 2026-07-31 12:58:45 +02:00
style.css Prvotna verzija spletne strani 2025-08-21 11:06:11 +02:00
update_html.py 2 nova članka 2025-08-25 15:43:46 +02:00
web-app-manifest-192x192.png Popravki za homepage 2025-09-09 13:25:10 +02:00
web-app-manifest-512x512.png Popravki za homepage 2025-09-09 13:25:10 +02:00

README.md

msos spletna stran