2026-11-11 Heimdall Asset guard: hx- matched only as an attribute; source scan of every view, C# page builder, css and js for cross-origin assets (Google Fonts allowance explicit) ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> 10e03ad8e8 View at this point in history 2026-11-11 14:12:09 +00:00 Heimdall Drop htmx: remove unpkg script, hx- attributes, refresh handler; add no-third-party-asset guard ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> d5dd0c2a94 View at this point in history 2026-11-11 12:24:54 +00:00