Added
- Added support for automatically adding Content Security Policy (CSP) nonces to <script> tags (including JSON-LD)
- Added Fixed Content Security Policy (CSP) script-src policies that should be added before the nonces
- Added a
sanitizeFieldData()
that's called when pulling from other Craft fields, to ensure no executable Twig code exists - Added a unit test for
sanitizeFieldData()