plain.htmx 0.10.3__tar.gz → 0.11.0__tar.gz

{plain_htmx-0.10.3 → plain_htmx-0.11.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plain.htmx
-Version: 0.10.3
+Version: 0.11.0
 Summary: Integrate HTMX with templates and views.
 Author-email: Dave Gaeddert <dave.gaeddert@dropseed.dev>
 License-Expression: BSD-3-Clause

{plain_htmx-0.10.3 → plain_htmx-0.11.0}/plain/htmx/CHANGELOG.md

@@ -1,5 +1,25 @@
 # plain-htmx changelog
 
+## [0.11.0](https://github.com/dropseed/plain/releases/plain-htmx@0.11.0) (2025-10-29)
+
+### What's changed
+
+- Added Content Security Policy (CSP) nonce support for inline scripts and styles generated by htmx ([784f3dd](https://github.com/dropseed/plain/commit/784f3dd972))
+
+### Upgrade instructions
+
+- No changes required
+
+## [0.10.4](https://github.com/dropseed/plain/releases/plain-htmx@0.10.4) (2025-10-20)
+
+### What's changed
+
+- Updated package configuration to use `dependency-groups.dev` instead of `tool.uv.dev-dependencies` ([1b43a3a](https://github.com/dropseed/plain/commit/1b43a3a272))
+
+### Upgrade instructions
+
+- No changes required
+
 ## [0.10.3](https://github.com/dropseed/plain/releases/plain-htmx@0.10.3) (2025-10-06)
 
 ### What's changed

{plain_htmx-0.10.3 → plain_htmx-0.11.0}/plain/htmx/assets/htmx/plainhtmx.js

@@ -1,4 +1,11 @@
 (() => {
+  // Get nonce from our own script tag's data attribute
+  const nonce = document.currentScript?.getAttribute("data-csp-nonce");
+
+  // Configure htmx for CSP compatibility
+  htmx.config.inlineScriptNonce = nonce;
+  htmx.config.inlineStyleNonce = nonce;
+
   htmx.defineExtension("plain-views", {
     init() {
       // Set or append this extension to the body hx-ext automatically

{plain_htmx-0.10.3 → plain_htmx-0.11.0}/plain/htmx/templates/htmx/js.html

@@ -15,4 +15,4 @@
 <script src="{{ asset('htmx/vendor/src/ext/' ~ extension ~ '.js') }}" defer></script>
 {%- endfor -%}
 
-<script src="{{ asset('htmx/plainhtmx.js') }}" defer></script>
+<script src="{{ asset('htmx/plainhtmx.js') }}" defer data-csp-nonce="{{ csp_nonce }}"></script>

{plain_htmx-0.10.3 → plain_htmx-0.11.0}/plain/htmx/templates.py

@@ -24,6 +24,7 @@ class HTMXJSExtension(InclusionTagExtension):
         return {
             "DEBUG": settings.DEBUG,
             "extensions": kwargs.get("extensions", []),
+            "csp_nonce": context.get("request").csp_nonce,
         }
 
 

{plain_htmx-0.10.3 → plain_htmx-0.11.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "plain.htmx"
-version = "0.10.3"
+version = "0.11.0"
 description = "Integrate HTMX with templates and views."
 authors = [{name = "Dave Gaeddert", email = "dave.gaeddert@dropseed.dev"}]
 license = "BSD-3-Clause"
@@ -10,8 +10,8 @@ dependencies = [
     "plain<1.0.0",
 ]
 
-[tool.uv]
-dev-dependencies = [
+[dependency-groups]
+dev = [
     "plain.pytest<1.0.0",
 ]