mirror of
https://github.com/luxfi/kms.git
synced 2026-07-27 05:54:18 +00:00
frontend CSP no longer needs to allow *.stripe.com (Infisical-era billing UI we don't use). Drop all stripe.com sources + the stripe-only child-src. Rename the Stripe-flavored example secret in zapserver/envelope tests to a neutral api-key/secret-value fixture. No Go code paths change.