From d2b3c92e81efbba7ec62395ed5203d819c75d74a Mon Sep 17 00:00:00 2001 From: Markus Heiser Date: Tue, 19 Aug 2025 10:05:42 +0200 Subject: [fix] move initial "JS is enabled?" (no-js) to client side To avoid an `unsafe-inline` in the CSP header, the JS code must be moved to the client side [1]. The `