#Security
Technical articles, field notes, and systems troubleshooting tagged under #Security.
Why Astro's Native security.csp Breaks on Shiki (And Why Switching to Prism Is a Bad Trade)
Why Astro's built-in security.csp breaks on Shiki code blocks and why switching from Shiki to Prism is a painful downgrade.
The Vibe Coders Checklist - Things LLMs Silently Break in Production Code
Why LLMs write untyped defensive JavaScript inside .ts files to silence errors, and how Prism, Vigil, and Craftsman clean it up.
Compiling Inline Event Handlers for Strict CSP in Astro
Shipping astro-strict-csp v0.2.0 to compile inline HTML event attributes into an SRI-hashed capture-phase delegated dispatcher with zero unsafe-inline.
Enforcing Strict CSP in Astro Without unsafe-inline
Packaging and publishing astro-strict-csp on npm: extracting Shiki styles and scripts to eliminate unsafe-inline without external dependencies.