From 3b3e95e23a2169cac2cdf9f410ed70285d874abd Mon Sep 17 00:00:00 2001
From: Bruno Charest <bruno.charest@gmail.com>
Date: Sun, 13 Sep 2026 12:35:28 -0400
Subject: [PATCH] fix(cloudflare): proteger les scripts inline des pages du
 Rocket Loader

Rocket Loader (Cloudflare) reecrit les balises script inline en type=...-text/javascript et les execute de facon differee, ce qui casse l'enregistrement des composants Alpine et l'init des pages lors d'un acces direct via le tunnel (ex. /settings ne se chargeait pas au complet). Ajout de data-cfasync=false sur les scripts inline des pages completes et des partiels du shell (settings, accounts, trash, workspace, board, gitea_workspace, welcome, import, page_editor_collection/embed, _database_table_scripts, _notification_bell, public_page, local_workspace). Les fragments charges via HTMX restent inchanges.
---
 app/templates/_database_table_scripts.html | 2 +-
 app/templates/_notification_bell.html      | 2 +-
 app/templates/accounts.html                | 2 +-
 app/templates/board.html                   | 2 +-
 app/templates/gitea_workspace.html         | 2 +-
 app/templates/import.html                  | 2 +-
 app/templates/local_workspace.html         | 2 +-
 app/templates/page_editor_collection.html  | 2 +-
 app/templates/page_editor_embed.html       | 2 +-
 app/templates/public_page.html             | 2 +-
 app/templates/settings.html                | 2 +-
 app/templates/trash.html                   | 2 +-
 app/templates/welcome.html                 | 2 +-
 app/templates/workspace.html               | 2 +-
 14 files changed, 14 insertions(+), 14 deletions(-)

diff --git a/app/templates/_database_table_scripts.html b/app/templates/_database_table_scripts.html
index ffffe4d..8fc38f2 100644
--- a/app/templates/_database_table_scripts.html
+++ b/app/templates/_database_table_scripts.html
@@ -1,6 +1,6 @@
 <!-- ═══════════ Database Table Scripts — Vanilla JS ═══════════ -->
 <style>.db-cell-invalid{outline:2px solid #e5484d;outline-offset:-1px;border-radius:4px}</style>
-<script>
+<script data-cfasync="false">
 (function() {
     'use strict';
 
diff --git a/app/templates/_notification_bell.html b/app/templates/_notification_bell.html
index 76d274d..8d3740c 100644
--- a/app/templates/_notification_bell.html
+++ b/app/templates/_notification_bell.html
@@ -61,7 +61,7 @@
   </div>
 </span>
 
-<script>
+<script data-cfasync="false">
 document.addEventListener('alpine:init', function () {
   if (window.Alpine && window.Alpine.__fdNotificationsRegistered) return;
   if (window.Alpine) window.Alpine.__fdNotificationsRegistered = true;
diff --git a/app/templates/accounts.html b/app/templates/accounts.html
index 4f70a28..73a9cad 100644
--- a/app/templates/accounts.html
+++ b/app/templates/accounts.html
@@ -104,7 +104,7 @@
 {% endblock %}
 
 {% block scripts %}
-<script>
+<script data-cfasync="false">
   function accountsData() {
     return {
       profile: { full_name: '', email: '' },
diff --git a/app/templates/board.html b/app/templates/board.html
index 9fbc19d..6d244b4 100644
--- a/app/templates/board.html
+++ b/app/templates/board.html
@@ -151,7 +151,7 @@
 {% endblock %}
 
 {% block scripts %}
-<script>
+<script data-cfasync="false">
   var owner = '{{ owner }}';
   var repo = '{{ repo }}';
   var initialView = '{{ initial_view }}';
diff --git a/app/templates/gitea_workspace.html b/app/templates/gitea_workspace.html
index 11dc3e5..ec7d0f9 100644
--- a/app/templates/gitea_workspace.html
+++ b/app/templates/gitea_workspace.html
@@ -35,7 +35,7 @@
 .gw-content pre[class*="language-"]{background:var(--bg-tertiary)!important;border:1px solid var(--border)!important;border-radius:8px!important;padding:16px!important;}
 </style>
 
-<script>
+<script data-cfasync="false">
 document.addEventListener('alpine:init', () => {
   Alpine.data('giteaWorkspace', () => {
   const params = new URLSearchParams(window.location.search);
diff --git a/app/templates/import.html b/app/templates/import.html
index 3401f8d..3c00731 100644
--- a/app/templates/import.html
+++ b/app/templates/import.html
@@ -210,7 +210,7 @@ select,input[type=text]{background:var(--bg3);color:var(--text);border:1px solid
   </div>
 </div>
 
-<script>
+<script data-cfasync="false">
 function importWizard() {
   return {
     sources: [],
diff --git a/app/templates/local_workspace.html b/app/templates/local_workspace.html
index 746151e..4440f4c 100644
--- a/app/templates/local_workspace.html
+++ b/app/templates/local_workspace.html
@@ -2452,7 +2452,7 @@ for (var _i = 0; _i < _wsKeys.length; _i++) {
 _wsInitData = window._wsInitData;
 console.log('FLOWDECK v2.4.6 — IIFE done, _wsInitData keys:', Object.keys(window._wsInitData).length);
 </script>
-<script>console.log('FLOWDECK v2.4.6 — ws-split about to render, _wsInitData exists:', typeof window._wsInitData !== 'undefined');</script>
+<script data-cfasync="false">console.log('FLOWDECK v2.4.6 — ws-split about to render, _wsInitData exists:', typeof window._wsInitData !== 'undefined');</script>
 
 <div class="ws-split"
      @contextmenu.prevent="_wsInitData.onContextMenu($event)"
diff --git a/app/templates/page_editor_collection.html b/app/templates/page_editor_collection.html
index 968fc45..96e1bf6 100644
--- a/app/templates/page_editor_collection.html
+++ b/app/templates/page_editor_collection.html
@@ -7,7 +7,7 @@ page_title %}{{ page.title }}{% endblock %} {% block topbar %}
 {% endblock %} {% block content %}
 {% include "_database_table.html" %}
 {% endblock %} {% block scripts %}
-<script>
+<script data-cfasync="false">
     // Initialize database table from server-rendered data
     window.__DB_PAGE_ID = {{ page.id }};
     window.__DB_COLLECTION_ID = {{ page.collection_id or 0 }};
diff --git a/app/templates/page_editor_embed.html b/app/templates/page_editor_embed.html
index db93a57..3afaafb 100644
--- a/app/templates/page_editor_embed.html
+++ b/app/templates/page_editor_embed.html
@@ -4,7 +4,7 @@
 {% block topbar %}{% endblock %}
 {% block content %}
 {% include '_page_editor_content.html' %}
-<script>document.body.classList.add('embed-mode');</script>
+<script data-cfasync="false">document.body.classList.add('embed-mode');</script>
 {% endblock %}
 {% block scripts %}
 {% include '_page_editor_scripts.html' %}
diff --git a/app/templates/public_page.html b/app/templates/public_page.html
index ea13d7c..aa6be99 100644
--- a/app/templates/public_page.html
+++ b/app/templates/public_page.html
@@ -173,7 +173,7 @@
 </footer>
 
 <script src="/static/js/katex.min.js?v=0.16.11"></script>
-<script>
+<script data-cfasync="false">
 document.addEventListener('DOMContentLoaded', function () {
   if (window.katex) {
     document.querySelectorAll('div[data-katex]').forEach(function (el) {
diff --git a/app/templates/settings.html b/app/templates/settings.html
index f1045c5..7cbadb7 100644
--- a/app/templates/settings.html
+++ b/app/templates/settings.html
@@ -898,7 +898,7 @@
   </div>
 </div>
 
-<script>
+<script data-cfasync="false">
 function settingsInit() {
   return {
     activeSection: 'account',
diff --git a/app/templates/trash.html b/app/templates/trash.html
index 59129b6..b913408 100644
--- a/app/templates/trash.html
+++ b/app/templates/trash.html
@@ -62,7 +62,7 @@
 {% endblock %}
 
 {% block scripts %}
-<script>
+<script data-cfasync="false">
   function trashData() {
     return {
       search: '',
diff --git a/app/templates/welcome.html b/app/templates/welcome.html
index e8b96a7..c56d6b4 100644
--- a/app/templates/welcome.html
+++ b/app/templates/welcome.html
@@ -133,7 +133,7 @@ h1{font-size:22px;font-weight:700;margin-bottom:6px;}
     </section>
   </div>
 
-<script>
+<script data-cfasync="false">
 function onboarding() {
   return {
     steps: ['Bienvenue', 'Espace de travail', 'Connecter une forge', 'Premier projet'],
diff --git a/app/templates/workspace.html b/app/templates/workspace.html
index 0505aa6..0242024 100644
--- a/app/templates/workspace.html
+++ b/app/templates/workspace.html
@@ -140,7 +140,7 @@
 
 </div>
 
-<script>
+<script data-cfasync="false">
 function workspacePage() {
   return {
     builtinProjects: [],