new API call ::security::csp::add_static_resource_header
The API call set the CSP rule on the current connection for a static
resource depending on the MIME type.
# Sample definition for custom CSP rules for static files in the
# OpenACS configuration file.
#
# ns_section ns/server/$server/acs {
# ...
# ns_param StaticCSP {
# image/svg+xml "script-src 'none'"
# }
# ...
# }
bump version number of acs-tcl to 5.10.1d13