Robots, Trusted Types, and various other bits...
All checks were successful
ci/woodpecker/push/ci Pipeline was successful
ci/woodpecker/push/deploy Pipeline was successful

This commit is contained in:
2026-02-06 21:07:57 -03:00
parent a52938f6cf
commit 9db2592cf4
13 changed files with 65 additions and 12 deletions

View File

@@ -155,3 +155,5 @@ pyftsubset ~/Downloads/Fraunces/fraunces-variable-opsz-wght.ttf \
## CSP
CSP is set via Traefik middleware, not in app code.
**Trusted Types:** This app is not compatible with `require-trusted-types-for 'script'`. Sveltes runtime assigns to DOM sinks (e.g. `innerHTML`) during hydration, which that directive blocks. The Traefik middleware used for mifi.dev/mifi.bio must not include `require-trusted-types-for 'script'` (or the site will break with "This assignment requires a TrustedHTML").