feat(auth): send a nonce-based CSP on the consent and error pages - #242

Open

mattzcarey wants to merge 2 commits into

mainfrom

feat/consent-page-csp

Commits on Sep 28, 2026

feat(auth): send a nonce-based CSP on the consent and error pages
mattzcarey
committed
d051dec
refactor(auth): one page shell owns the CSP nonce; no form-action on the consent page
mattzcarey
committed
d62eaa2