Justin c7a10ae719 Fix CSP violations from Cloudflare Radar scan ... Two duplicate <meta> CSP tags in index.html conflicted with the _headers HTTP header, and browsers enforce the intersection of all active policies. That blocked the profile photo, the inline nav- highlight script, and the Cloudflare Insights beacon. Consolidate to a single CSP in _headers, allow the actual external resources the page needs (ki5bhv.com image, cloudflareinsights.com beacon), and move the inline script/onerror handler into js/main.js so script-src no longer needs 'unsafe-inline'. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>		2026-08-30 16:28:33 -05:00
..
main.js	Fix CSP violations from Cloudflare Radar scan	2026-08-30 16:28:33 -05:00