Krzysztof kuhy Rudnicki 84d1c6e897 Record browser CSP verification for SearXNG ... Closes the one gap left open at deploy time. The strict CSP (default-src 'none') had only been validated by static asset analysis, because headless chromium produced empty output on this host and the browser extension was not connected at the time. Loaded the live instance in a real browser: front page, text search, image search and autocomplete all work, and the UNFILTERED console shows 4 messages total -- all benign [PLUGIN] calculator DEBUG lines from SearXNG's own bundle, zero "Refused to load" CSP violations. The "?" tiles in image results are upstream 404s, not blocked requests. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Cb77nxXGwFYFM4fyXEQkzG		2026-08-09 17:26:28 +02:00
..
cleanup-2026-05	chore: spring-clean repo root (move docs, relocate batch3 script, drop stale outputs)	2026-05-14 20:01:09 +02:00
explanations	session_autopsy: badge counts only significant candidates; zero-token aliases	2026-07-25 18:05:49 +02:00
superpowers	Record browser CSP verification for SearXNG	2026-08-09 17:26:28 +02:00
device-owner-wipe-checklist.md	Format the wipe checklist with prettier	2026-08-05 09:42:52 +02:00
dns-filtering-parked.md	Park phone DNS filtering: Private DNS fails closed, so the PC cannot host it	2026-08-05 10:05:16 +02:00
mcp-shortlist.html	docs: add MCP server security-triage shortlist	2026-07-17 19:16:31 +02:00