Use CSS classes to provide code syntax highlighting style.
That gets rid of the last use of style attributes, so add a nonce to the style tag and lock down the style-src Content Security Policy.
Also fix the attempted load of a favicon. We never referred to one in Better Erors, but the browser attempts to load /favicon.ico by default. So by providing a blank one and allowing data: img-src in the CSP, we can stop the browser from complaining about it. (It might be nice to actually have a favicon representing Better Errors, but it doesn't seem very important right now.)
style
attributes, so add a nonce to the style tag and lock down thestyle-src
Content Security Policy./favicon.ico
by default. So by providing a blank one and allowingdata:
img-src in the CSP, we can stop the browser from complaining about it. (It might be nice to actually have a favicon representing Better Errors, but it doesn't seem very important right now.)