Notes
Technical notes
How I built or solved specific things, with the detail that does not fit in a case study.
A strict CSP in Astro on Cloudflare Workers, without unsafe-inline
How this site reached A+ on securityheaders.com with a policy that only allows the inline scripts its own build produced, and the WebKit detail that almost broke it.
- security
- astro
- cloudflare
When 100 % coverage was not enough
Mutation testing on this site's domain found rules the tests executed without checking. First I had to find out why the tool reported 41 % for a reason that had nothing to do with the tests.
- testing
- stryker
- quality