w

README

w

handcrafted personal site

About

Who am i?

style

--black: #000000;
--primary: #a06be0;
--gray: #999;
--white: #eceff1;
--mono: "Inconsolata", monospace;
--serif: "Lora", serif;

csp

Report-To: {"group": "csp-endpoint", "max_age": 10886400, "endpoints": [{"url":"https://statslogger.seankhliao.com/json"}]}

default-src 'self';
upgrade-insecure-requests;
connect-src https://statslogger.seankhliao.com https://www.google-analytics.com;
font-src https://static.seankhliao.com;
img-src *;
object-src 'none';
script-src-elem 'nonce-deadbeef2' 'nonce-deadbeef3' 'nonce-deadbeef4' https://static.seankhliao.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.googletagmanager.com;
sandbox allow-scripts;
style-src-elem 'nonce-deadbeef1' https://static.seankhliao.com;
report-to csp-endpoint;
report-uri https://statslogger.seankhliao.com/json";

notes

gtm csp

script-src: 'unsafe-inline' https://www.googletagmanager.com
img-src: www.googletagmanager.com

ga csp

script-src: https://www.google-analytics.com https://ssl.google-analytics.com
img-src: https://www.google-analytics.com
connect-src: https://www.google-analytics.com

gtm preview csp

script-src: https://tagmanager.google.com
style-src: https://tagmanager.google.com https://fonts.googleapis.com
img-src: https://ssl.gstatic.com https://www.gstatic.com
font-src: https://fonts.gstatic.com data: