Krzysztof kuhy Rudnicki 84d1c6e897 Record browser CSP verification for SearXNG ... Closes the one gap left open at deploy time. The strict CSP (default-src 'none') had only been validated by static asset analysis, because headless chromium produced empty output on this host and the browser extension was not connected at the time. Loaded the live instance in a real browser: front page, text search, image search and autocomplete all work, and the UNFILTERED console shows 4 messages total -- all benign [PLUGIN] calculator DEBUG lines from SearXNG's own bundle, zero "Refused to load" CSP violations. The "?" tiles in image results are upstream 404s, not blocked requests. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Cb77nxXGwFYFM4fyXEQkzG		2026-08-09 17:26:28 +02:00
..
contracts	Park phone DNS filtering: Private DNS fails closed, so the PC cannot host it	2026-08-05 10:05:16 +02:00
evidence	Record browser CSP verification for SearXNG	2026-08-09 17:26:28 +02:00
memory	style(prettier): apply markdown/json formatting updates	2026-05-07 22:08:00 +02:00
plans	feat(phone-focus): add recovery workflow, automation scripts, and docs	2026-05-01 19:07:27 +02:00
sessions	chore(agent): add governance checks and artifact workflow scaffolding	2026-05-07 22:03:43 +02:00
specs	feat(phone-focus): add recovery workflow, automation scripts, and docs	2026-05-01 19:07:27 +02:00
workflows	chore(agent): add governance checks and artifact workflow scaffolding	2026-05-07 22:03:43 +02:00