Display tab sliders + accent picker now respond to clicks/drags: Both the brightness and contrast sliders on the Display tab, and the accent-color picker in the header, were rendering dynamic HTML with inline oninput / onchange / onclick attributes — every one of which the server's strict script-src 'self' CSP silently dropped. The result: brightness and contrast couldn't be changed from the WebUI at all, and picking a custom accent did nothing. Replaced the inline attributes with data-* markers and wired proper addEventListener calls (delegated on the slider container, direct on the accent dropdown), so the controls work under the strict CSP without any unsafe-inline / unsafe-hashes relaxation. (e1c8474)
alexei.dolgolyov released this