Content Security Policy (CSP) is a great option that more people should look into enabling for their websites. Here are my experiences with it on this blog.
Although CSP is not a replacement for proper security because it relies on the browser to respect the policy. It can still help you locate problem points and should be enabled early in development.
I first enabled just the default-src 'self'; directive and soon realized that it...
The most basic blog has started. Here are some not very well organized thoughts on what's happened so far.
Webdock's cheapest plan makes this side project blog idea's monetary investment cheaper than the price of a meal, once per month. Their server setup couldn't be simpler and painless - the typical web stack was pre installed, which meant I could just set up the site with a little bit of Nginx config changes and some directory permission changes (admittedly those were not rea...