fix(web): allow Google consent form redirects #108

Merged
eleith merged 1 commits from fix/google-consent-csp into main 2026-10-30 18:22:03 +00:00
1 Commits
Author SHA1 Message Date
eleith d60f89c9e2 fix(web): allow Google consent form redirects
ci/woodpecker/pr/web Pipeline was successful
ci/woodpecker/push/web Pipeline was successful
Permit only accounts.google.com alongside self in form-action. Assert the exact delivered policy in the existing security-header case; retain existing consent redirect and nonce tests unchanged without adding browser interception infrastructure.
2026-10-30 08:39:25 -07:00