sunjunzhao 3010fca54c fix(app-dev): align embedCsp contract with platform boolean flags ...

- embedCsp is connectSrc + wasmUnsafeEval + blob (all default off), not per-directive lists
- cross-origin script/worker loading is unsupported; fetch + Blob is the supported path
- check-app.sh/selftest validate flags and platform capability boundaries

2026-10-26 01:04:35 +08:00

..

references

fix(app-dev): align embedCsp contract with platform boolean flags

2026-10-26 01:04:35 +08:00

scripts

fix(app-dev): align embedCsp contract with platform boolean flags

2026-10-26 01:04:35 +08:00

SKILL.md

fix(app-dev): align embedCsp contract with platform boolean flags

2026-10-26 01:04:35 +08:00