Enforce the strict web CSP (was report-only) - #7

Merged

sparkyfen merged 2 commits into

consfyi:mainfrom

sparkyfen:security/web-csp-enforce

Jul 17, 2026

Commits on Jul 17, 2026

web: enforce the strict CSP (was report-only), allowlist CF analytics
sparkyfen
committed
a324339
web: harden inject-csp (regex + $-safe replace) and add unit tests
sparkyfen
committed
145068a