Skip to content

v1.1.20

Choose a tag to compare

View all tags
@voyvodka voyvodka released this 29 May 11:28
· 16 commits to main since this release
v1.1.20
95fa4d1

Security

  • Response-header hardening — removed the deprecated block-all-mixed-content directive from the CSP (upgrade-insecure-requests supersedes it) and added a Permissions-Policy denying camera, microphone, geolocation, payment, USB, the motion sensors, and the Topics API. No functional change — the static site calls no powerful browser APIs.

Structured Data

  • Organization logo dimensions corrected — the logo ImageObject now declares 320x80 to match the SVG's intrinsic viewBox (was 512x128), so strict validators don't flag a dimension mismatch.
Assets 2
Loading