The new default Content-Security-Policy contains a nonce that is made available to components during rendering.
This allows including inline scripts as well as scripts from any source easily by specifying a nonce, and forbids arbitrary js from jsdelivr in case of xss
* Initial carousel component implementation
* change carousel example
* make the carousel text description more readable by adding a background
* update cat example
* carousel automatic cycling is now optional
* remove requirement for unique name attribute in carousel
see https://github.com/lovasoa/SQLpage/pull/179#discussion_r1445378383
* fix carousel buttons
* uodate deps
* fix official site docs
* lint
* update changelog
---------
Co-authored-by: Olivier Auverlot <@olivierauverlot>
* Add support for embed parameter that skips the shell layout
* Add support for cards with remote content
* Adapt js to support lazy-loaded fragments
* Add example
* Reformat & Fix lint errors
* Update query param name and add docs
* Add example
* squash migrations
---------
Co-authored-by: lovasoa <pere.jobs@gmail.com>