Kyle Isom 15e7eb5bd1 Remove all inline JS from admin templates ...

script-src 'self' blocks inline onclick handlers and <script> blocks.
Migrate all interactive behavior to data-* attributes wired by mcias.js:

- data-toggle-form: accounts, policies, pgcreds create-form buttons
- data-href: audit clickable table rows
- data-tab: policy form tab switching (moved showTab from inline script)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-01 08:26:29 -07:00

..

fragments

Remove all inline JS from admin templates

2026-04-01 08:26:29 -07:00

account_detail.html

Add WebAuthn config; Docker single-mount

2026-03-16 18:57:06 -07:00

accounts.html

Remove all inline JS from admin templates

2026-04-01 08:26:29 -07:00

audit_detail.html

Fix grpcserver rate limiter: move to Server field

2026-03-11 19:23:34 -07:00

audit.html

Implement dashboard and audit log templates, add paginated audit log support

2026-03-11 14:05:08 -07:00

base.html

Move SSO clients from config to database

2026-03-31 23:47:53 -07:00

dashboard.html

Allow non-admin users to access dashboard

2026-03-12 23:40:21 -07:00

login.html

Add SSO authorization code flow (Phase 1)

2026-03-30 15:21:48 -07:00

pgcreds.html

Remove all inline JS from admin templates

2026-04-01 08:26:29 -07:00

policies.html

Remove all inline JS from admin templates

2026-04-01 08:26:29 -07:00

profile.html

Fix WebAuthn CSRF; clarify security key UI

2026-03-16 19:27:44 -07:00

service_accounts.html

Add policy-based authz and token delegation

2026-03-15 14:40:16 -07:00

sso_clients.html

Fix CSP-blocked inline handlers on SSO clients page

2026-04-01 08:22:17 -07:00

unseal.html

Add vault seal/unseal lifecycle

2026-03-14 23:55:37 -07:00