Security hardening + CSP compatibility fixes: Twitter embeds, Spotify popup, inline style - #270

Merged

lpmi-13 merged 4 commits into

mainfrom

copilot/clone-pull-252

Aug 2, 2026

Commits on Feb 25, 2026

Initial plan
Copilot
committed
4f334fd
Security hardening: CSP, referrer policy, inline script extraction, Bunny Fonts, iframe sandbox

Copilot
and
benfoxall
committed
d67f9b4

Commits on Aug 2, 2026

Merge branch 'copilot/run-security-audit-remotehack' of http://localhost:26831/remotehack/remotehack.github.io into copilot/clone-pull-252
Copilot
authored
f37a879
Fix CSP side-effects: Twitter embeds, bold time, Spotify popup
Copilot
authored
30b2cb1