9297f9a

fix(csp): add nonce to dynamically injected <style> (sticky-notes, visual-editor); make csp-report endpoint public so browser violation reports are accepted instead of 403

2026-08-03T20:58:07+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>