From d29ffb3aadc35699664d56dc06c8e448873c015b Mon Sep 17 00:00:00 2001
From: "google-labs-jules[bot]"
<161369871+google-labs-jules[bot]@users.noreply.github.com>
Date: Sat, 11 Apr 2026 00:28:17 +0000
Subject: [PATCH] =?UTF-8?q?=F0=9F=9B=A1=EF=B8=8F=20Sentinel:=20[security?=
=?UTF-8?q?=20improvement]=20Harden=20CSP=20and=20Referrer=20Policy?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Hardened the Content Security Policy by replacing 'unsafe-inline' with
SHA-256 hashes for inline styles and scripts. Added defensive
directives: object-src 'none', base-uri 'self', and
upgrade-insecure-requests. Also added a 'no-referrer' policy to protect
user privacy. Verified with Playwright to ensure no CSP violations.
Co-authored-by: Shin5hi <200498632+Shin5hi@users.noreply.github.com>
---
index.html | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/index.html b/index.html
index 4098199..c11f76f 100644
--- a/index.html
+++ b/index.html
@@ -3,7 +3,8 @@
-
+
+
5ive - UX Sample