Skip to content

Fix CSP-safe editable cells for 3.2.1 - #43

Merged
arm092 merged 2 commits into
masterfrom
agent/release-3.2.1-csp-editable
Aug 9, 2026
Merged

arm092 merged 2 commits into
masterfrom
agent/release-3.2.1-csp-editable

Conversation

@arm092

@arm092 arm092 commented Aug 9, 2026

Copy link
Copy Markdown
Owner

What changed

  • replace CSP-unsafe inline Alpine expressions in editable cells with a registered self-hosted component
  • preserve hidden state through Livewire hydration and morphing
  • support Livewire 4 fieldEdited detail payloads
  • add a strict-CSP Chromium regression and CI browser job
  • document the published-view refresh required for consumers

Root cause

The editable Blade view used complex inline Alpine expressions that are not stable with Livewire's CSP-safe evaluator. Livewire 4 also emits fieldEdited as a single detail object rather than two positional callback arguments.

Validation

  • PHPUnit: 79 tests, 302 assertions
  • Chromium strict-CSP regression: passed
  • Composer audit: no advisories
  • npm audit: no vulnerabilities
  • git diff --check: passed

@cursor

cursor Bot commented Aug 9, 2026

Copy link
Copy Markdown

Bugbot is not enabled for your account, so this pull request was not reviewed.

Enable Bugbot in the Cursor dashboard to get automatic reviews on future PRs.

@arm092
arm092 merged commit 5b8411b into master Aug 9, 2026
5 checks passed
@arm092
arm092 deleted the agent/release-3.2.1-csp-editable branch August 9, 2026 10:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant