Andrew (Paradi) Alexander

Add CSP to prevent malicious takeover of admin dashboard [Terril CSP Cash.me](https://medium.com/square-corner-blog/content-security-policy-for-single-page-web-apps-78f2b2cf1757)

Theory 1: - eval the code so it registers the window variables - execute the command to render the variables from window Theory 2: - all tab scripts stay on...

Currently we package remote static assets from respective NPM packages and remote URLs within `@misk/common` which are included in shipped compiled code. `@misk/common/styles.js` and `@misk/common/vendors.js` are vital to each tab,...

https://github.com/jxnblk/styled-system

Ideally we avoid requiring applications to manually configure their main function in build.gradle and detect it.

Only run Dokka in CI

5

Dokka code doc generation happens within test Gradle configuration paths which slows down local development. In practice, these docs are only useful on release, not needing be updated on every...

All internal usages have been migrated and the val has been deprecated since 2023-06-30 so removal should be a safe breaking change and code cleanup.

Disable tab links if unauthorized

1

Currently, even if a caller is unauthorized to access a tab, they can click the link in the menu and navigate to it. When they do, they encounter the non-UI...