2 Commits

Author	SHA1	Message	Date
popovskik	6323d55718	fix(csp): allow Cloudflare Web Analytics in Content-Security-Policy ... The enforced CSP blocked the Cloudflare beacon, so Web Analytics wasn't collecting anything on the live site. Add https://static.cloudflareinsights.com to script-src (loads beacon.min.js) and https://cloudflareinsights.com to connect-src (RUM data POST). Also documented that re-enabling the Preferred Sources pill will need https://news.google.com in the CSP. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-08-30 15:40:34 +02:00
popovskik	6bf9bdfdab	chore(seo): disable preferred-sources hub pill until Top Stories eligible ... msosorg.com is not yet a Google Top Stories source, so the interactive pill dead-ends at "No results". Disable addPill() (keep the subtle footer link, which is harmless and ready). Documented the re-enable steps in docs/preferred-sources.md so we don't forget. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-08-30 12:39:06 +02:00