Follow-up to #580 / pull #587. The arm's page, the resting card and /admin say who you are, with Sign out. /story (src/story.ts) and /admin/data (src/data-page.ts) do not yet: their CSPs say form-action 'none', so the Sign out form cannot go there as is.
Done when: both pages render renderSignedIn() from src/signed-in.ts (with SIGNED_IN_STYLE in their pinned style), their CSP allows form-action 'self' and nothing more, and a test checks the line and the form on each, guest and signed in.
Follow-up to #580 / pull #587. The arm's page, the resting card and /admin say who you are, with Sign out. /story (src/story.ts) and /admin/data (src/data-page.ts) do not yet: their CSPs say
form-action 'none', so the Sign out form cannot go there as is.Done when: both pages render
renderSignedIn()from src/signed-in.ts (with SIGNED_IN_STYLE in their pinned style), their CSP allowsform-action 'self'and nothing more, and a test checks the line and the form on each, guest and signed in.