[{"data":1,"prerenderedAt":2092},["ShallowReactive",2],{"page:\u002Fproduction-ready-deployment-cicd-workflows\u002Fsecurity-headers-for-static-sites\u002Fwriting-a-content-security-policy-for-a-static-site":3,"all-docs-nav":1548},{"id":4,"title":5,"body":6,"breadcrumb":1524,"dateModified":1533,"datePublished":1533,"description":1534,"extension":1535,"faq":1536,"meta":1541,"navigation":1542,"path":1543,"seo":1544,"slug":12,"stem":1545,"type":1546,"__hash__":1547},"content\u002Fproduction-ready-deployment-cicd-workflows\u002Fsecurity-headers-for-static-sites\u002Fwriting-a-content-security-policy-for-a-static-site\u002Findex.md","Writing a Content Security Policy for a Static Site",{"type":7,"value":8,"toc":1506},"minimark",[9,13,26,35,40,61,65,68,203,210,312,316,323,331,349,366,533,537,544,905,908,912,915,1024,1038,1116,1120,1126,1226,1229,1233,1332,1336,1410,1414,1423,1427,1432,1435,1439,1442,1446,1449,1453,1456,1460,1503],[10,11,5],"h1",{"id":12},"writing-a-content-security-policy-for-a-static-site",[14,15,16,17,21,22,25],"p",{},"A Content-Security-Policy is a list of places a page is allowed to load code and data from. Written well, it means an injected script cannot run and a compromised third-party script cannot send data anywhere unexpected. Written badly, it either breaks the site on deploy or includes ",[18,19,20],"code",{},"'unsafe-inline'"," and ",[18,23,24],{},"https:"," wildcards that allow nearly everything. The difference is process: inventory what the site really uses, write the narrowest policy that covers it, run it in report-only mode against real traffic, and only then enforce.",[14,27,28,29,34],{},"This guide takes a 700-page Astro documentation site on Cloudflare Pages through that process. The wider context is ",[30,31,33],"a",{"href":32},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fsecurity-headers-for-static-sites\u002F","Security Headers and Hardening for Static Sites",".",[36,37,39],"h2",{"id":38},"prerequisites","Prerequisites",[41,42,43,55,58],"ul",{},[44,45,46,47,50,51,54],"li",{},"The ability to set response headers — a ",[18,48,49],{},"_headers"," file on Cloudflare Pages or Netlify, ",[18,52,53],{},"vercel.json",", or server config.",[44,56,57],{},"An endpoint to receive violation reports. A small edge function is enough.",[44,59,60],{},"A list of third-party services the site uses: analytics, embeds, forms, search, fonts.",[36,62,64],{"id":63},"step-1-inventory-the-sources","Step 1: Inventory the Sources",[14,66,67],{},"Static sites make the inventory easy because all HTML is on disk. List every external origin referenced in the built output, grouped by attribute:",[69,70,75],"pre",{"className":71,"code":72,"language":73,"meta":74,"style":74},"language-bash shiki shiki-themes github-light github-dark","grep -rhoE '(src|href|action)=\"https?:\u002F\u002F[^\u002F\"]+' dist --include=*.html \\\n  | sed -E 's\u002F^(src|href|action)=\"\u002F\u002F' | sort | uniq -c | sort -rn\ngrep -rhoE '\u003Cscript(\\s[^>]*)?>[^\u003C]' dist --include=*.html | wc -l   # inline scripts\ngrep -rhoE 'style=\"' dist --include=*.html | wc -l                   # inline styles\n","bash","",[18,76,77,110,146,176],{"__ignoreMap":74},[78,79,82,86,90,94,97,100,104,107],"span",{"class":80,"line":81},"line",1,[78,83,85],{"class":84},"sScJk","grep",[78,87,89],{"class":88},"sj4cs"," -rhoE",[78,91,93],{"class":92},"sZZnC"," '(src|href|action)=\"https?:\u002F\u002F[^\u002F\"]+'",[78,95,96],{"class":92}," dist",[78,98,99],{"class":88}," --include=",[78,101,103],{"class":102},"szBVR","*",[78,105,106],{"class":88},".html",[78,108,109],{"class":88}," \\\n",[78,111,113,116,119,122,125,128,131,133,136,139,141,143],{"class":80,"line":112},2,[78,114,115],{"class":102},"  |",[78,117,118],{"class":84}," sed",[78,120,121],{"class":88}," -E",[78,123,124],{"class":92}," 's\u002F^(src|href|action)=\"\u002F\u002F'",[78,126,127],{"class":102}," |",[78,129,130],{"class":84}," sort",[78,132,127],{"class":102},[78,134,135],{"class":84}," uniq",[78,137,138],{"class":88}," -c",[78,140,127],{"class":102},[78,142,130],{"class":84},[78,144,145],{"class":88}," -rn\n",[78,147,149,151,153,156,158,160,162,164,166,169,172],{"class":80,"line":148},3,[78,150,85],{"class":84},[78,152,89],{"class":88},[78,154,155],{"class":92}," '\u003Cscript(\\s[^>]*)?>[^\u003C]'",[78,157,96],{"class":92},[78,159,99],{"class":88},[78,161,103],{"class":102},[78,163,106],{"class":88},[78,165,127],{"class":102},[78,167,168],{"class":84}," wc",[78,170,171],{"class":88}," -l",[78,173,175],{"class":174},"sJ8bj","   # inline scripts\n",[78,177,179,181,183,186,188,190,192,194,196,198,200],{"class":80,"line":178},4,[78,180,85],{"class":84},[78,182,89],{"class":88},[78,184,185],{"class":92}," 'style=\"'",[78,187,96],{"class":92},[78,189,99],{"class":88},[78,191,103],{"class":102},[78,193,106],{"class":88},[78,195,127],{"class":102},[78,197,168],{"class":84},[78,199,171],{"class":88},[78,201,202],{"class":174},"                   # inline styles\n",[14,204,205,206,209],{},"Then load one page of each template in Chrome with DevTools open and record anything requested at runtime that is not in the HTML — fonts from stylesheets, scripts loaded by other scripts, ",[18,207,208],{},"fetch"," calls. On the docs site the inventory was:",[211,212,213,226],"table",{},[214,215,216],"thead",{},[217,218,219,223],"tr",{},[220,221,222],"th",{},"Resource type",[220,224,225],{},"Sources found",[227,228,229,245,257,272,280,290,301],"tbody",{},[217,230,231,235],{},[232,233,234],"td",{},"Scripts",[232,236,237,238,241,242],{},"own bundles (",[18,239,240],{},"\u002F_astro\u002F","), 3 inline scripts (theme, search trigger, analytics loader), ",[18,243,244],{},"plausible.io",[217,246,247,250],{},[232,248,249],{},"Styles",[232,251,252,253,256],{},"own stylesheets, 41 inline ",[18,254,255],{},"style"," attributes (from Markdown SVG diagrams)",[217,258,259,262],{},[232,260,261],{},"Images",[232,263,264,265,268,269],{},"own origin, ",[18,266,267],{},"data:"," URIs for icons, ",[18,270,271],{},"img.example-cdn.net",[217,273,274,277],{},[232,275,276],{},"Fonts",[232,278,279],{},"own origin",[217,281,282,285],{},[232,283,284],{},"Connections",[232,286,287,288],{},"own origin (search fragments), ",[18,289,244],{},[217,291,292,295],{},[232,293,294],{},"Frames",[232,296,297,300],{},[18,298,299],{},"www.youtube-nocookie.com"," on 9 pages",[217,302,303,306],{},[232,304,305],{},"Form targets",[232,307,308,311],{},[18,309,310],{},"forms.example.com"," (contact page)",[36,313,315],{"id":314},"step-2-draft-the-policy","Step 2: Draft the Policy",[14,317,318,319,322],{},"Translate the inventory into directives, starting from ",[18,320,321],{},"default-src 'self'"," so anything unlisted is blocked:",[69,324,329],{"className":325,"code":327,"language":328,"meta":74},[326],"language-text","Content-Security-Policy-Report-Only:\n  default-src 'self';\n  script-src 'self' 'sha256-3q2+7w…' 'sha256-Vx9aP…' 'sha256-kLm0Q…' https:\u002F\u002Fplausible.io 'wasm-unsafe-eval';\n  style-src 'self' 'unsafe-hashes' 'sha256-…';\n  img-src 'self' data: https:\u002F\u002Fimg.example-cdn.net;\n  font-src 'self';\n  connect-src 'self' https:\u002F\u002Fplausible.io;\n  frame-src https:\u002F\u002Fwww.youtube-nocookie.com;\n  form-action 'self' https:\u002F\u002Fforms.example.com;\n  frame-ancestors 'none';\n  base-uri 'self';\n  object-src 'none';\n  upgrade-insecure-requests;\n  report-to csp-endpoint\nReporting-Endpoints: csp-endpoint=\"https:\u002F\u002Fdocs.example.com\u002Fapi\u002Fcsp-report\"\n","text",[18,330,327],{"__ignoreMap":74},[14,332,333,334,336,337,341,342,345,346,34],{},"The three inline scripts are allowed by hash rather than ",[18,335,20],{},". Computing those hashes by hand is fragile; generate them in the build, as shown in ",[30,338,340],{"href":339},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fsecurity-headers-for-static-sites\u002Fhash-based-csp-for-inline-scripts-in-astro\u002F","Hash-Based CSP for Inline Scripts in Astro",". ",[18,343,344],{},"'wasm-unsafe-eval'"," is there for Pagefind's WebAssembly search engine and allows WebAssembly compilation only, not JavaScript ",[18,347,348],{},"eval",[14,350,351,352,354,355,357,358,361,362,365],{},"Inline ",[18,353,255],{}," attributes were the awkward part: 41 of them, all on SVG diagrams. Rather than allowing ",[18,356,20],{}," in ",[18,359,360],{},"style-src",", the diagrams were moved to use presentation attributes and classes, leaving ",[18,363,364],{},"style-src 'self'"," achievable after one clean-up pass.",[367,368,369,529],"figure",{},[370,371,378,379,378,383,378,387,378,394,378,514],"svg",{"viewBox":372,"role":373,"ariaLabelledBy":374,"xmlns":377},"0 0 760 290","img",[375,376],"csp-inv-title","csp-inv-desc","http:\u002F\u002Fwww.w3.org\u002F2000\u002Fsvg","\n  ",[380,381,382],"title",{"id":375},"From inventory to directives",[384,385,386],"desc",{"id":376},"Inventory items on the left map to directives on the right. Own bundles and hashed inline scripts and the analytics origin map to script-src. Own images, data URIs and the image CDN map to img-src. Search fragments and analytics beacons map to connect-src. The YouTube embed maps to frame-src. The form service maps to form-action. Everything else falls to default-src self.",[388,389],"rect",{"x":390,"y":390,"width":391,"height":392,"fill":393},"0","760","290","#ffffff",[395,396,398,399,398,406,398,415,398,420,398,423,398,427,398,430,398,434,398,437,398,441,398,444,398,448,398,454,398,459,398,461,398,464,398,466,398,469,398,471,398,474,398,476,398,479,398,502,398,509,378],"g",{"style":397},"font-family:system-ui, sans-serif;font-size:12px","\n    ",[328,400,405],{"x":401,"y":402,"fill":403,"style":404},"380","28","#1f2937","font-size:16px;font-weight:700;text-anchor:middle","Each directive exists because the inventory found a use",[388,407],{"x":408,"y":409,"width":410,"height":408,"rx":411,"fill":412,"stroke":413,"style":414},"30","50","280","6","#f8fafc","#d9e2ef","stroke-width:1px",[328,416,419],{"x":417,"y":418,"fill":403},"42","70","own bundles, 3 hashed inline, plausible.io",[388,421],{"x":408,"y":422,"width":410,"height":408,"rx":411,"fill":412,"stroke":413,"style":414},"90",[328,424,426],{"x":417,"y":425,"fill":403},"110","own images, data: icons, image CDN",[388,428],{"x":408,"y":429,"width":410,"height":408,"rx":411,"fill":412,"stroke":413,"style":414},"130",[328,431,433],{"x":417,"y":432,"fill":403},"150","search fragments, analytics beacon",[388,435],{"x":408,"y":436,"width":410,"height":408,"rx":411,"fill":412,"stroke":413,"style":414},"170",[328,438,440],{"x":417,"y":439,"fill":403},"190","YouTube embed on 9 pages",[388,442],{"x":408,"y":443,"width":410,"height":408,"rx":411,"fill":412,"stroke":413,"style":414},"210",[328,445,447],{"x":417,"y":446,"fill":403},"230","contact form service",[388,449],{"x":450,"y":409,"width":451,"height":408,"rx":411,"fill":452,"opacity":453,"stroke":452,"style":414},"470","260","#6a4c93","0.14",[328,455,458],{"x":456,"y":418,"fill":403,"style":457},"482","font-weight:700","script-src",[388,460],{"x":450,"y":422,"width":451,"height":408,"rx":411,"fill":452,"opacity":453,"stroke":452,"style":414},[328,462,463],{"x":456,"y":425,"fill":403,"style":457},"img-src",[388,465],{"x":450,"y":429,"width":451,"height":408,"rx":411,"fill":452,"opacity":453,"stroke":452,"style":414},[328,467,468],{"x":456,"y":432,"fill":403,"style":457},"connect-src",[388,470],{"x":450,"y":436,"width":451,"height":408,"rx":411,"fill":452,"opacity":453,"stroke":452,"style":414},[328,472,473],{"x":456,"y":439,"fill":403,"style":457},"frame-src",[388,475],{"x":450,"y":443,"width":451,"height":408,"rx":411,"fill":452,"opacity":453,"stroke":452,"style":414},[328,477,478],{"x":456,"y":446,"fill":403,"style":457},"form-action",[395,480,484,485,484,490,484,493,484,496,484,499,398],{"stroke":481,"fill":482,"style":483},"#556071","none","stroke-width:2px","\n      ",[486,487],"path",{"d":488,"style":489},"M312 65 L466 65","marker-end:url(#csp-inv-arrow)",[486,491],{"d":492,"style":489},"M312 105 L466 105",[486,494],{"d":495,"style":489},"M312 145 L466 145",[486,497],{"d":498,"style":489},"M312 185 L466 185",[486,500],{"d":501,"style":489},"M312 225 L466 225",[388,503],{"x":408,"y":504,"width":505,"height":506,"rx":411,"fill":507,"opacity":453,"stroke":508,"style":414},"252","700","26","#8ac926","#5a8a16",[328,510,513],{"x":401,"y":511,"fill":403,"style":512},"270","text-anchor:middle","everything not listed → default-src 'self' → blocked if cross-origin",[515,516,398,517,378],"defs",{},[518,519,484,526,398],"marker",{"id":520,"viewBox":521,"refX":522,"refY":523,"markerWidth":524,"markerHeight":524,"orient":525},"csp-inv-arrow","0 0 10 10","8","5","7","auto-start-reverse",[486,527],{"d":528,"fill":481},"M0 0 L10 5 L0 10 z",[530,531,532],"figcaption",{},"A policy built from an inventory is short and specific; a policy built from error messages tends to accumulate wildcards.",[36,534,536],{"id":535},"step-3-collect-reports","Step 3: Collect Reports",[14,538,539,540,543],{},"Deploy the header as ",[18,541,542],{},"Content-Security-Policy-Report-Only",". The browser evaluates the policy and sends a report for every violation, but blocks nothing. The receiving endpoint on Cloudflare Workers:",[69,545,549],{"className":546,"code":547,"language":548,"meta":74,"style":74},"language-js shiki shiki-themes github-light github-dark","\u002F\u002F functions\u002Fapi\u002Fcsp-report.js (Cloudflare Pages Function)\nexport async function onRequestPost({ request, env }) {\n  const body = await request.json().catch(() => null);\n  const reports = Array.isArray(body) ? body : [body?.['csp-report'] ? { body: body['csp-report'] } : null];\n  for (const r of reports.filter(Boolean)) {\n    const b = r.body ?? r;\n    const src = b.sourceFile ?? b['source-file'] ?? '';\n    if (\u002F^(chrome|moz|safari)-extension\u002F.test(src)) continue;       \u002F\u002F extension noise\n    await env.CSP_LOG.writeDataPoint({\n      blobs: [b.effectiveDirective ?? b['effective-directive'], b.blockedURL ?? b['blocked-uri'], b.documentURL ?? b['document-uri']],\n    });\n  }\n  return new Response(null, { status: 204 });\n}\n","js",[18,550,551,556,587,625,678,705,725,756,804,824,860,866,872,899],{"__ignoreMap":74},[78,552,553],{"class":80,"line":81},[78,554,555],{"class":174},"\u002F\u002F functions\u002Fapi\u002Fcsp-report.js (Cloudflare Pages Function)\n",[78,557,558,561,564,567,570,574,578,581,584],{"class":80,"line":112},[78,559,560],{"class":102},"export",[78,562,563],{"class":102}," async",[78,565,566],{"class":102}," function",[78,568,569],{"class":84}," onRequestPost",[78,571,573],{"class":572},"sVt8B","({ ",[78,575,577],{"class":576},"s4XuR","request",[78,579,580],{"class":572},", ",[78,582,583],{"class":576},"env",[78,585,586],{"class":572}," }) {\n",[78,588,589,592,595,598,601,604,607,610,613,616,619,622],{"class":80,"line":148},[78,590,591],{"class":102},"  const",[78,593,594],{"class":88}," body",[78,596,597],{"class":102}," =",[78,599,600],{"class":102}," await",[78,602,603],{"class":572}," request.",[78,605,606],{"class":84},"json",[78,608,609],{"class":572},"().",[78,611,612],{"class":84},"catch",[78,614,615],{"class":572},"(() ",[78,617,618],{"class":102},"=>",[78,620,621],{"class":88}," null",[78,623,624],{"class":572},");\n",[78,626,627,629,632,634,637,640,643,646,649,652,655,658,661,663,666,668,671,673,675],{"class":80,"line":178},[78,628,591],{"class":102},[78,630,631],{"class":88}," reports",[78,633,597],{"class":102},[78,635,636],{"class":572}," Array.",[78,638,639],{"class":84},"isArray",[78,641,642],{"class":572},"(body) ",[78,644,645],{"class":102},"?",[78,647,648],{"class":572}," body ",[78,650,651],{"class":102},":",[78,653,654],{"class":572}," [body?.[",[78,656,657],{"class":92},"'csp-report'",[78,659,660],{"class":572},"] ",[78,662,645],{"class":102},[78,664,665],{"class":572}," { body: body[",[78,667,657],{"class":92},[78,669,670],{"class":572},"] } ",[78,672,651],{"class":102},[78,674,621],{"class":88},[78,676,677],{"class":572},"];\n",[78,679,681,684,687,690,693,696,699,702],{"class":80,"line":680},5,[78,682,683],{"class":102},"  for",[78,685,686],{"class":572}," (",[78,688,689],{"class":102},"const",[78,691,692],{"class":88}," r",[78,694,695],{"class":102}," of",[78,697,698],{"class":572}," reports.",[78,700,701],{"class":84},"filter",[78,703,704],{"class":572},"(Boolean)) {\n",[78,706,708,711,714,716,719,722],{"class":80,"line":707},6,[78,709,710],{"class":102},"    const",[78,712,713],{"class":88}," b",[78,715,597],{"class":102},[78,717,718],{"class":572}," r.body ",[78,720,721],{"class":102},"??",[78,723,724],{"class":572}," r;\n",[78,726,728,730,733,735,738,740,743,746,748,750,753],{"class":80,"line":727},7,[78,729,710],{"class":102},[78,731,732],{"class":88}," src",[78,734,597],{"class":102},[78,736,737],{"class":572}," b.sourceFile ",[78,739,721],{"class":102},[78,741,742],{"class":572}," b[",[78,744,745],{"class":92},"'source-file'",[78,747,660],{"class":572},[78,749,721],{"class":102},[78,751,752],{"class":92}," ''",[78,754,755],{"class":572},";\n",[78,757,759,762,764,767,770,774,777,780,782,785,787,789,792,795,798,801],{"class":80,"line":758},8,[78,760,761],{"class":102},"    if",[78,763,686],{"class":572},[78,765,766],{"class":92},"\u002F",[78,768,769],{"class":102},"^",[78,771,773],{"class":772},"sA_wV","(chrome",[78,775,776],{"class":102},"|",[78,778,779],{"class":772},"moz",[78,781,776],{"class":102},[78,783,784],{"class":772},"safari)-extension",[78,786,766],{"class":92},[78,788,34],{"class":572},[78,790,791],{"class":84},"test",[78,793,794],{"class":572},"(src)) ",[78,796,797],{"class":102},"continue",[78,799,800],{"class":572},";       ",[78,802,803],{"class":174},"\u002F\u002F extension noise\n",[78,805,807,810,813,816,818,821],{"class":80,"line":806},9,[78,808,809],{"class":102},"    await",[78,811,812],{"class":572}," env.",[78,814,815],{"class":88},"CSP_LOG",[78,817,34],{"class":572},[78,819,820],{"class":84},"writeDataPoint",[78,822,823],{"class":572},"({\n",[78,825,827,830,832,834,837,840,842,844,847,850,852,854,857],{"class":80,"line":826},10,[78,828,829],{"class":572},"      blobs: [b.effectiveDirective ",[78,831,721],{"class":102},[78,833,742],{"class":572},[78,835,836],{"class":92},"'effective-directive'",[78,838,839],{"class":572},"], b.blockedURL ",[78,841,721],{"class":102},[78,843,742],{"class":572},[78,845,846],{"class":92},"'blocked-uri'",[78,848,849],{"class":572},"], b.documentURL ",[78,851,721],{"class":102},[78,853,742],{"class":572},[78,855,856],{"class":92},"'document-uri'",[78,858,859],{"class":572},"]],\n",[78,861,863],{"class":80,"line":862},11,[78,864,865],{"class":572},"    });\n",[78,867,869],{"class":80,"line":868},12,[78,870,871],{"class":572},"  }\n",[78,873,875,878,881,884,887,890,893,896],{"class":80,"line":874},13,[78,876,877],{"class":102},"  return",[78,879,880],{"class":102}," new",[78,882,883],{"class":84}," Response",[78,885,886],{"class":572},"(",[78,888,889],{"class":88},"null",[78,891,892],{"class":572},", { status: ",[78,894,895],{"class":88},"204",[78,897,898],{"class":572}," });\n",[78,900,902],{"class":80,"line":901},14,[78,903,904],{"class":572},"}\n",[14,906,907],{},"Group reports by directive and blocked URL and review them daily for the first week. Each distinct entry is either a gap in the policy (add the source) or something that should not be there (remove it from the site).",[36,909,911],{"id":910},"step-4-fix-then-enforce","Step 4: Fix, Then Enforce",[14,913,914],{},"The first week produced 18,400 reports. After filtering extensions, 214 remained, collapsing to seven distinct causes:",[211,916,917,930],{},[214,918,919],{},[217,920,921,924,927],{},[220,922,923],{},"Cause",[220,925,926],{},"Reports",[220,928,929],{},"Action",[227,931,932,950,963,973,984,995,1008],{},[217,933,934,937,940],{},[232,935,936],{},"Analytics script loaded a second endpoint",[232,938,939],{},"96",[232,941,942,943,946,947,949],{},"added ",[18,944,945],{},"https:\u002F\u002Fplausible.io"," to ",[18,948,468],{}," (already there, typo fixed)",[217,951,952,957,960],{},[232,953,954,955],{},"Search result excerpts used inline ",[18,956,255],{},[232,958,959],{},"51",[232,961,962],{},"changed to classes in the result template",[217,964,965,968,970],{},[232,966,967],{},"One old blog post embedded a CodePen iframe",[232,969,402],{},[232,971,972],{},"replaced with a static screenshot and link",[217,974,975,978,981],{},[232,976,977],{},"Theme toggle script hash changed after edit",[232,979,980],{},"19",[232,982,983],{},"hashes now generated at build time",[217,985,986,989,992],{},[232,987,988],{},"A vendor font requested from a font CDN in an embed",[232,990,991],{},"11",[232,993,994],{},"embed moved behind click-to-load facade",[217,996,997,1003,1005],{},[232,998,999,1002],{},[18,1000,1001],{},"about:blank"," frames from a browser feature",[232,1004,411],{},[232,1006,1007],{},"ignored (browser noise)",[217,1009,1010,1013,1016],{},[232,1011,1012],{},"Base64 image in an SVG",[232,1014,1015],{},"3",[232,1017,1018,1020,1021,1023],{},[18,1019,267],{}," already allowed for ",[18,1022,463],{},"; SVG moved to file",[14,1025,1026,1027,1029,1030,1033,1034,1037],{},"In week two, remaining reports were extension noise and the known ",[18,1028,1001],{}," entries. The header was switched from ",[18,1031,1032],{},"-Report-Only"," to enforcing, keeping ",[18,1035,1036],{},"report-to"," so new violations are still visible.",[367,1039,1040,1113],{},[370,1041,378,1046,378,1049,378,1052,378,1054],{"viewBox":1042,"role":373,"ariaLabelledBy":1043,"xmlns":377},"0 0 760 270",[1044,1045],"csp-reports-title","csp-reports-desc",[380,1047,1048],{"id":1044},"Daily reports during rollout",[384,1050,1051],{"id":1045},"A line of non-extension CSP reports per day over fourteen days. Days one to three show 40 to 45 reports a day. Fixes on days four to six bring it down to about 10. Days eight to fourteen hover at 1 to 3. Enforcement begins on day ten, with no increase afterwards.",[388,1053],{"x":390,"y":390,"width":391,"height":511,"fill":393},[395,1055,398,1056,398,1059,398,1064,398,1066,398,1071,398,1075,398,1078,398,1083,398,1087,398,1094,398,1100,398,1105,398,1109,378],{"style":397},[328,1057,1058],{"x":401,"y":402,"fill":403,"style":404},"Non-extension violation reports per day",[80,1060],{"x1":418,"y1":1061,"x2":1062,"y2":1061,"stroke":481,"style":1063},"220","720","stroke-width:1.5px",[80,1065],{"x1":418,"y1":409,"x2":418,"y2":1061,"stroke":481,"style":1063},[328,1067,390],{"x":1068,"y":1069,"fill":481,"style":1070},"62","224","font-size:11px;text-anchor:end",[328,1072,1074],{"x":1068,"y":1073,"fill":481,"style":1070},"138","25",[328,1076,409],{"x":1068,"y":1077,"fill":481,"style":1070},"54",[1079,1080],"polyline",{"points":1081,"fill":482,"stroke":452,"style":1082},"90,77 136,70 182,74 228,118 274,162 320,186 366,194 412,210 458,214 504,213 550,216 596,214 642,217 688,215","stroke-width:2.5px",[80,1084],{"x1":1085,"y1":409,"x2":1085,"y2":1061,"stroke":508,"style":1086},"504","stroke-width:1.5px;stroke-dasharray:6 4",[328,1088,1093],{"x":1089,"y":1090,"fill":1091,"style":1092},"510","64","#3f6410","font-size:11px;font-weight:700","enforcing from day 10",[328,1095,1099],{"x":1096,"y":1097,"fill":403,"style":1098},"228","108","font-size:11px","fixes ship",[328,1101,1104],{"x":422,"y":1102,"fill":481,"style":1103},"240","font-size:11px;text-anchor:middle","day 1",[328,1106,1108],{"x":1107,"y":1102,"fill":481,"style":1103},"688","day 14",[328,1110,1112],{"x":401,"y":1111,"fill":481,"style":1103},"262","~310,000 page views over the period; 18,400 extension reports filtered in week one alone",[530,1114,1115],{},"The switch to enforcing is safe when the report line is flat at noise level — here, from day eight.",[36,1117,1119],{"id":1118},"keeping-the-policy-current","Keeping the Policy Current",[14,1121,1122,1123,1125],{},"A CSP is part of the site's configuration and changes with it. Two habits keep it from rotting. Put the policy in the repository — generated into ",[18,1124,49],{}," at build time from a small config object — so every change is reviewed. And add a CI check that parses the built HTML for external origins and inline scripts and fails if any appear that the policy would block. That catches the author who adds an embed or an inline script in a Markdown file long before a reader's browser does. Adding a vendor becomes a one-line policy change reviewed next to the code that needs it, which is exactly where the security decision belongs.",[367,1127,1128,1223],{},[370,1129,378,1134,378,1137,378,1140,378,1142,378,1216],{"viewBox":1130,"role":373,"ariaLabelledBy":1131,"xmlns":377},"0 0 760 240",[1132,1133],"csp-ci-title","csp-ci-desc",[380,1135,1136],{"id":1132},"Policy check in the build",[384,1138,1139],{"id":1133},"The build writes HTML and generates the _headers file from a policy config. A check scans the HTML for external origins and inline scripts and compares them with the policy. If everything is covered, the deploy continues. If a new origin or unhashed script appears, the pull request fails with the file and the directive that would block it.",[388,1141],{"x":390,"y":390,"width":391,"height":1102,"fill":393},[395,1143,398,1144,398,1147,398,1153,398,1158,398,1162,398,1168,398,1172,398,1175,398,1182,398,1187,398,1191,398,1196,398,1200,398,1212,378],{"style":397},[328,1145,1146],{"x":401,"y":402,"fill":403,"style":404},"Catch policy gaps at review, not in readers' browsers",[388,1148],{"x":408,"y":418,"width":1149,"height":1150,"rx":1151,"fill":1152,"opacity":453,"stroke":1152,"style":1063},"160","56","10","#1982c4",[328,1154,1157],{"x":425,"y":1155,"fill":403,"style":1156},"94","font-weight:700;text-anchor:middle","build",[328,1159,1161],{"x":425,"y":1160,"fill":481,"style":1103},"112","HTML + _headers",[388,1163],{"x":446,"y":418,"width":1164,"height":1150,"rx":1151,"fill":1165,"opacity":1166,"stroke":1167,"style":1063},"200","#ffca3a","0.24","#a97b00",[328,1169,1171],{"x":1170,"y":1155,"fill":403,"style":1156},"330","scan vs policy",[328,1173,1174],{"x":1170,"y":1160,"fill":481,"style":1103},"origins, inline hashes",[388,1176],{"x":1177,"y":1178,"width":1179,"height":1180,"rx":1151,"fill":507,"opacity":1181,"stroke":508,"style":1063},"480","46","250","44","0.18",[328,1183,1186],{"x":1184,"y":1185,"fill":403,"style":1156},"605","73","all covered → deploy",[388,1188],{"x":1177,"y":425,"width":1179,"height":1150,"rx":1151,"fill":1189,"opacity":453,"stroke":1190,"style":1063},"#ff595e","#d83b41",[328,1192,1195],{"x":1184,"y":1193,"fill":1194,"style":1156},"134","#b32b30","gap → PR fails",[328,1197,1199],{"x":1184,"y":1198,"fill":481,"style":1103},"152","guides\u002Fembeds.html · frame-src",[395,1201,484,1202,484,1206,484,1209,398],{"stroke":481,"fill":482,"style":483},[486,1203],{"d":1204,"style":1205},"M192 98 L226 98","marker-end:url(#csp-ci-arrow)",[486,1207],{"d":1208,"style":1205},"M432 90 L476 70",[486,1210],{"d":1211,"style":1205},"M432 108 L476 134",[328,1213,1215],{"x":401,"y":1214,"fill":481,"style":1103},"214","In six months the check failed nine pull requests; seven added a vendor and updated the policy in the same PR",[515,1217,398,1218,378],{},[518,1219,484,1221,398],{"id":1220,"viewBox":521,"refX":522,"refY":523,"markerWidth":524,"markerHeight":524,"orient":525},"csp-ci-arrow",[486,1222],{"d":528,"fill":481},[530,1224,1225],{},"The check turns policy maintenance into a normal review conversation instead of a production incident.",[14,1227,1228],{},"The other two failures were more interesting: one was a Markdown author pasting an embed snippet from a vendor's site, the other a dependency update that started injecting an inline style. Neither would have been noticed until readers' browsers started blocking content, and in enforcing mode that would have meant a silently broken page rather than a failed build.",[36,1230,1232],{"id":1231},"measured-impact","Measured Impact",[211,1234,1235,1248],{},[214,1236,1237],{},[217,1238,1239,1242,1245],{},[220,1240,1241],{},"Measure",[220,1243,1244],{},"Before",[220,1246,1247],{},"After",[227,1249,1250,1268,1279,1290,1301,1312,1322],{},[217,1251,1252,1255,1257],{},[232,1253,1254],{},"CSP",[232,1256,482],{},[232,1258,1259,1260,357,1263,1265,1266],{},"enforcing, no ",[18,1261,1262],{},"unsafe-inline",[18,1264,458],{}," or ",[18,1267,360],{},[217,1269,1270,1273,1276],{},[232,1271,1272],{},"Mozilla Observatory",[232,1274,1275],{},"70\u002F100 (B, baseline headers only)",[232,1277,1278],{},"115\u002F100 (A+)",[217,1280,1281,1284,1287],{},[232,1282,1283],{},"Inline scripts allowed",[232,1285,1286],{},"any",[232,1288,1289],{},"3, by hash",[217,1291,1292,1295,1298],{},[232,1293,1294],{},"External script origins allowed",[232,1296,1297],{},"unlimited",[232,1299,1300],{},"1",[217,1302,1303,1306,1309],{},[232,1304,1305],{},"Pages changed to fit the policy",[232,1307,1308],{},"—",[232,1310,1311],{},"11 (one blog post, search template, diagrams)",[217,1313,1314,1317,1319],{},[232,1315,1316],{},"Reports per day, enforcing (non-extension)",[232,1318,1308],{},[232,1320,1321],{},"1–3",[217,1323,1324,1327,1329],{},[232,1325,1326],{},"LCP p75 change",[232,1328,1308],{},[232,1330,1331],{},"none measurable",[36,1333,1335],{"id":1334},"pitfalls-rollback","Pitfalls & Rollback",[41,1337,1338,1345,1357,1363,1379,1389,1395,1401],{},[44,1339,1340,1344],{},[1341,1342,1343],"strong",{},"Starting in enforcing mode."," Always run report-only first on real traffic; lab testing does not exercise every template and embed.",[44,1346,1347,1356],{},[1341,1348,1349,1350,1265,1352,357,1354,34],{},"Allowing ",[18,1351,24],{},[18,1353,103],{},[18,1355,458],{}," That permits scripts from any HTTPS origin and removes most of the protection.",[44,1358,1359,1362],{},[1341,1360,1361],{},"Hand-maintained hashes."," Any edit to an inline script changes its hash and breaks it. Generate hashes in the build.",[44,1364,1365,1374,1375,1378],{},[1341,1366,1367,1368,21,1371,34],{},"Forgetting ",[18,1369,1370],{},"object-src 'none'",[18,1372,1373],{},"base-uri"," Without them, plugins and ",[18,1376,1377],{},"\u003Cbase>"," tag injection remain open.",[44,1380,1381,1384,1385,1388],{},[1341,1382,1383],{},"Not filtering extension reports."," They drown real signal; filter by ",[18,1386,1387],{},"source-file"," scheme.",[44,1390,1391,1394],{},[1341,1392,1393],{},"One policy for previews and production."," Preview hosts often inject a feedback toolbar script. Allow it only on preview hostnames, through a separate header rule, never in the production policy.",[44,1396,1397,1400],{},[1341,1398,1399],{},"Ignoring the 404 page."," Error pages are often served through a different rule set; confirm the policy header is present on them too.",[44,1402,1403,1406,1407,1409],{},[1341,1404,1405],{},"Rollback:"," change the header name back to ",[18,1408,542],{},". The policy stops blocking immediately on the next deploy while reports keep flowing.",[36,1411,1413],{"id":1412},"conclusion","Conclusion",[14,1415,1416,1417,1419,1420,1422],{},"A strong CSP on a static site comes from a short, repeatable process: inventory the sources from the built HTML, draft a policy from ",[18,1418,321],{}," upwards, run it in report-only mode against real readers, fix what the reports show, and enforce once only noise remains. On a 700-page docs site that took two weeks and eleven page changes, produced a policy without ",[18,1421,20],{},", and had no measurable performance cost.",[36,1424,1426],{"id":1425},"faq","FAQ",[1428,1429,1431],"h3",{"id":1430},"where-should-i-start-when-writing-a-csp","Where should I start when writing a CSP?",[14,1433,1434],{},"With an inventory of every origin and inline script the site actually uses, taken from the built HTML and a crawl with DevTools. Start from default-src 'self' and add only what the inventory shows is needed.",[1428,1436,1438],{"id":1437},"how-long-should-report-only-mode-run","How long should report-only mode run?",[14,1440,1441],{},"Long enough to see every template and every third-party feature used by real readers, typically one to two weeks. Switch to enforcing once new reports are only from browser extensions.",[1428,1443,1445],{"id":1444},"can-i-set-csp-in-a-meta-tag-instead-of-a-header","Can I set CSP in a meta tag instead of a header?",[14,1447,1448],{},"Partly. A meta tag supports most fetch directives but not frame-ancestors, report-uri or report-to, and it only applies to content after the tag. Use the HTTP header where the host allows it.",[1428,1450,1452],{"id":1451},"should-the-policy-be-identical-on-every-page","Should the policy be identical on every page?",[14,1454,1455],{},"A single site-wide policy is easiest to maintain. Where a few pages need extra sources, such as video embeds, add a path-specific header rule for those pages rather than loosening the policy everywhere.",[36,1457,1459],{"id":1458},"related","Related",[41,1461,1462,1471,1476,1483,1493],{},[44,1463,1464,1467,1468,1470],{},[1341,1465,1466],{},"Parent:"," ",[30,1469,33],{"href":32}," — the full header set.",[44,1472,1473,1475],{},[30,1474,340],{"href":339}," — generating hashes automatically.",[44,1477,1478,1482],{},[30,1479,1481],{"href":1480},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fsecurity-headers-for-static-sites\u002Fsubresource-integrity-for-third-party-assets\u002F","Subresource Integrity for Third-Party Assets"," — verifying the scripts the policy allows.",[44,1484,1485,1489,1490,1492],{},[30,1486,1488],{"href":1487},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fcdn-caching-rules-for-ssgs\u002Fsetting-cache-control-headers-on-cloudflare-pages\u002F","Setting Cache-Control Headers on Cloudflare Pages"," — the ",[18,1491,49],{}," file in depth.",[44,1494,1495,1499,1500,34],{},[30,1496,1498],{"href":1497},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fserverless-functions-for-static-sites\u002Fhandling-form-submissions-on-a-static-site\u002F","Handling Form Submissions on a Static Site"," — keeping ",[18,1501,1502],{},"form-action 'self'",[255,1504,1505],{},"html pre.shiki code .sScJk, html code.shiki .sScJk{--shiki-default:#6F42C1;--shiki-dark:#B392F0}html pre.shiki code .sj4cs, html code.shiki .sj4cs{--shiki-default:#005CC5;--shiki-dark:#79B8FF}html pre.shiki code .sZZnC, html code.shiki .sZZnC{--shiki-default:#032F62;--shiki-dark:#9ECBFF}html pre.shiki code .szBVR, html code.shiki .szBVR{--shiki-default:#D73A49;--shiki-dark:#F97583}html pre.shiki code .sJ8bj, html code.shiki .sJ8bj{--shiki-default:#6A737D;--shiki-dark:#6A737D}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .sVt8B, html code.shiki .sVt8B{--shiki-default:#24292E;--shiki-dark:#E1E4E8}html pre.shiki code .s4XuR, html code.shiki .s4XuR{--shiki-default:#E36209;--shiki-dark:#FFAB70}html pre.shiki code .sA_wV, html code.shiki .sA_wV{--shiki-default:#032F62;--shiki-dark:#DBEDFF}",{"title":74,"searchDepth":112,"depth":112,"links":1507},[1508,1509,1510,1511,1512,1513,1514,1515,1516,1517,1523],{"id":38,"depth":112,"text":39},{"id":63,"depth":112,"text":64},{"id":314,"depth":112,"text":315},{"id":535,"depth":112,"text":536},{"id":910,"depth":112,"text":911},{"id":1118,"depth":112,"text":1119},{"id":1231,"depth":112,"text":1232},{"id":1334,"depth":112,"text":1335},{"id":1412,"depth":112,"text":1413},{"id":1425,"depth":112,"text":1426,"children":1518},[1519,1520,1521,1522],{"id":1430,"depth":148,"text":1431},{"id":1437,"depth":148,"text":1438},{"id":1444,"depth":148,"text":1445},{"id":1451,"depth":148,"text":1452},{"id":1458,"depth":112,"text":1459},[1525,1527,1530,1531],{"name":1526,"item":766},"Home",{"name":1528,"item":1529},"Production-Ready Deployment & CI\u002FCD Workflows","\u002Fproduction-ready-deployment-cicd-workflows\u002F",{"name":33,"item":32},{"name":5,"item":1532},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fsecurity-headers-for-static-sites\u002Fwriting-a-content-security-policy-for-a-static-site\u002F","2026-09-18","Build a Content-Security-Policy for a static site from an inventory of its sources, roll it out in report-only mode, and switch to enforcing without breakage.","md",[1537,1538,1539,1540],{"q":1431,"a":1434},{"q":1438,"a":1441},{"q":1445,"a":1448},{"q":1452,"a":1455},{},true,"\u002Fproduction-ready-deployment-cicd-workflows\u002Fsecurity-headers-for-static-sites\u002Fwriting-a-content-security-policy-for-a-static-site",{"title":5,"description":1534},"production-ready-deployment-cicd-workflows\u002Fsecurity-headers-for-static-sites\u002Fwriting-a-content-security-policy-for-a-static-site\u002Findex","article","rOOpih_2SkeKKTve6iUlKAm7ACPKuqhk2lHy0SFNe0w",[1549,1552,1555,1558,1561,1564,1567,1570,1573,1576,1579,1582,1585,1588,1591,1594,1597,1600,1603,1606,1609,1612,1615,1618,1621,1624,1627,1630,1633,1636,1639,1642,1645,1648,1651,1654,1657,1660,1663,1666,1669,1672,1675,1678,1681,1684,1687,1690,1693,1696,1699,1702,1705,1708,1711,1714,1717,1720,1723,1726,1729,1732,1735,1738,1741,1744,1747,1750,1753,1756,1759,1762,1765,1768,1771,1774,1777,1780,1783,1786,1789,1792,1795,1798,1801,1804,1807,1810,1813,1816,1819,1822,1825,1828,1831,1834,1837,1840,1843,1846,1849,1852,1855,1858,1861,1864,1867,1870,1873,1876,1879,1882,1885,1888,1891,1894,1897,1900,1903,1906,1909,1912,1915,1918,1921,1924,1927,1930,1933,1936,1939,1942,1945,1948,1951,1954,1957,1960,1963,1966,1969,1972,1975,1978,1981,1984,1987,1990,1993,1996,1999,2002,2005,2008,2011,2014,2017,2020,2023,2026,2029,2032,2035,2038,2041,2044,2046,2048,2051,2053,2054,2057,2060,2063,2066,2069,2072,2075,2078,2080,2083,2086,2089],{"path":1550,"title":1551},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fastro-vs-eleventy-for-documentation-sites\u002Fastro-vs-eleventy-build-times-at-10000-pages","Astro vs Eleventy Build Times at 10,000 Pages",{"path":1553,"title":1554},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fastro-vs-eleventy-for-documentation-sites\u002Fchoosing-between-astro-and-eleventy-for-large-docs","Astro vs Eleventy for Large Docs (1000+ Pages)",{"path":1556,"title":1557},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fastro-vs-eleventy-for-documentation-sites\u002Fcontent-collections-vs-eleventy-data-cascade","Content Collections vs the Eleventy Data Cascade",{"path":1559,"title":1560},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fastro-vs-eleventy-for-documentation-sites","Astro vs Eleventy for Documentation Sites",{"path":1562,"title":1563},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fastro-vs-eleventy-for-documentation-sites\u002Fshortcodes-vs-components-for-docs-authors","Shortcodes vs Components for Docs Authors",{"path":1565,"title":1566},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fastro-vs-eleventy-for-documentation-sites\u002Fsidebar-navigation-in-astro-and-eleventy","Sidebar Navigation in Astro and Eleventy",{"path":1568,"title":1569},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fdocs-frameworks-docusaurus-starlight-vitepress\u002Fcustomizing-starlight-without-forking-the-theme","Customizing Starlight Without Forking the Theme",{"path":1571,"title":1572},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fdocs-frameworks-docusaurus-starlight-vitepress\u002Fdocusaurus-vs-starlight-for-product-documentation","Docusaurus vs Starlight for Product Documentation",{"path":1574,"title":1575},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fdocs-frameworks-docusaurus-starlight-vitepress","Docs Frameworks: Docusaurus, Starlight and VitePress",{"path":1577,"title":1578},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fdocs-frameworks-docusaurus-starlight-vitepress\u002Fmdx-vs-markdoc-for-docs-content","MDX vs Markdoc for Docs Content",{"path":1580,"title":1581},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fdocs-frameworks-docusaurus-starlight-vitepress\u002Fmigrating-from-mkdocs-to-starlight","Migrating from MkDocs to Starlight",{"path":1583,"title":1584},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fdocs-frameworks-docusaurus-starlight-vitepress\u002Fversioned-documentation-with-docusaurus","Versioned Documentation with Docusaurus",{"path":1586,"title":1587},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fdocs-frameworks-docusaurus-starlight-vitepress\u002Fvitepress-for-library-documentation","VitePress for Library Documentation",{"path":1589,"title":1590},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fhugo-build-times-for-large-repositories\u002Fhow-to-benchmark-hugo-vs-astro-build-speeds","How to Benchmark Hugo vs Astro Build Speeds",{"path":1592,"title":1593},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fhugo-build-times-for-large-repositories\u002Fhugo-partialcached-for-faster-builds","Hugo partialCached for Faster Builds",{"path":1595,"title":1596},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fhugo-build-times-for-large-repositories","Hugo Build Times for Large Repositories",{"path":1598,"title":1599},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fhugo-build-times-for-large-repositories\u002Fprofiling-hugo-templates-with-template-metrics","Profiling Hugo Templates With Template Metrics",{"path":1601,"title":1602},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fhugo-build-times-for-large-repositories\u002Freducing-hugo-memory-usage-on-ci-runners","Reducing Hugo Memory Usage on CI Runners",{"path":1604,"title":1605},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fhugo-build-times-for-large-repositories\u002Fspeeding-up-hugo-builds-with-render-hooks-and-caching","Speeding Up Hugo Builds with Render Hooks & Caching",{"path":1607,"title":1608},"\u002Fchoosing-the-right-static-site-generator-for-production","Choosing the Right Static Site Generator for Production",{"path":1610,"title":1611},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fjekyll-plugin-ecosystem\u002Feleventy-vs-jekyll-for-markdown-heavy-blogs","Eleventy vs Jekyll for Markdown-Heavy Blogs",{"path":1613,"title":1614},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fjekyll-plugin-ecosystem","Jekyll Plugin Ecosystem",{"path":1616,"title":1617},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fjekyll-plugin-ecosystem\u002Freplacing-jekyll-plugins-when-migrating-to-eleventy","Replacing Jekyll Plugins When Migrating to Eleventy",{"path":1619,"title":1620},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fjekyll-plugin-ecosystem\u002Frunning-jekyll-on-github-pages-without-plugins","Running Jekyll on GitHub Pages Without Plugins",{"path":1622,"title":1623},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fjekyll-plugin-ecosystem\u002Fspeeding-up-slow-jekyll-builds","Speeding Up Slow Jekyll Builds",{"path":1625,"title":1626},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fjekyll-plugin-ecosystem\u002Fupgrading-jekyll-and-ruby-versions-safely","Upgrading Jekyll and Ruby Versions Safely",{"path":1628,"title":1629},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fmigrating-between-static-site-generators\u002Fconverting-front-matter-at-scale-during-migration","Converting Front Matter at Scale During Migration",{"path":1631,"title":1632},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fmigrating-between-static-site-generators","Migrating Between Static Site Generators",{"path":1634,"title":1635},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fmigrating-between-static-site-generators\u002Fkeeping-redirects-working-after-an-ssg-migration","Keeping Redirects Working After an SSG Migration",{"path":1637,"title":1638},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fmigrating-between-static-site-generators\u002Fmigrating-a-docs-site-from-jekyll-to-hugo","Migrating a Docs Site From Jekyll to Hugo",{"path":1640,"title":1641},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fmigrating-between-static-site-generators\u002Fmigrating-from-gatsby-to-astro","Migrating from Gatsby to Astro",{"path":1643,"title":1644},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fmigrating-between-static-site-generators\u002Fmigrating-from-hugo-to-astro-without-breaking-urls","Migrating From Hugo to Astro Without Breaking URLs",{"path":1646,"title":1647},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fmigrating-between-static-site-generators\u002Fmigrating-wordpress-to-a-static-site-generator","Migrating WordPress to a Static Site Generator",{"path":1649,"title":1650},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fmigrating-between-static-site-generators\u002Fporting-shortcodes-and-includes-between-generators","Porting Shortcodes and Includes Between Generators",{"path":1652,"title":1653},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fnextjs-static-export-for-content-sites\u002Fhandling-dynamic-routes-in-nextjs-static-export","Handling Dynamic Routes in Next.js Static Export",{"path":1655,"title":1656},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fnextjs-static-export-for-content-sites","Next.js Static Export for Content Sites",{"path":1658,"title":1659},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fnextjs-static-export-for-content-sites\u002Fmigrating-from-gatsby-to-nextjs-static-export","Migrating from Gatsby to Next.js Static Export",{"path":1661,"title":1662},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fnextjs-static-export-for-content-sites\u002Fnextjs-app-router-static-export-limitations","Next.js App Router Static Export Limitations",{"path":1664,"title":1665},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fnextjs-static-export-for-content-sites\u002Fnextjs-static-export-vs-astro-for-marketing-sites","Next.js Static Export vs Astro for Marketing",{"path":1667,"title":1668},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fnextjs-static-export-for-content-sites\u002Foptimizing-images-in-nextjs-static-export","Optimizing Images in Next.js Static Export",{"path":1670,"title":1671},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fsearch-for-static-sites\u002Fadding-pagefind-to-an-astro-site","Adding Pagefind to an Astro Site",{"path":1673,"title":1674},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fsearch-for-static-sites\u002Fbuilding-a-lunr-index-at-build-time-in-eleventy","Building a Lunr Index at Build Time in Eleventy",{"path":1676,"title":1677},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fsearch-for-static-sites","Search for Static Sites",{"path":1679,"title":1680},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fsearch-for-static-sites\u002Findexing-hugo-sites-with-pagefind","Indexing Hugo Sites with Pagefind",{"path":1682,"title":1683},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fsearch-for-static-sites\u002Fmultilingual-search-on-static-sites","Multilingual Search on Static Sites",{"path":1685,"title":1686},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fsearch-for-static-sites\u002Fpagefind-vs-algolia-docsearch","Pagefind vs Algolia DocSearch",{"path":1688,"title":1689},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fsearch-for-static-sites\u002Fsearch-index-size-budgets-for-large-docs","Search Index Size Budgets for Large Docs",{"path":1691,"title":1692},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fssg-framework-selection-matrix\u002Fbest-ssg-for-technical-writers-without-coding-experience","Best SSG for Non-Developer Technical Writers",{"path":1694,"title":1695},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fssg-framework-selection-matrix\u002Fchoosing-an-ssg-for-api-reference-documentation","Choosing an SSG for API Reference Documentation",{"path":1697,"title":1698},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fssg-framework-selection-matrix\u002Fevaluating-ssg-accessibility-defaults","Evaluating SSG Accessibility Defaults",{"path":1700,"title":1701},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fssg-framework-selection-matrix","SSG Framework Selection Matrix",{"path":1703,"title":1704},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fssg-framework-selection-matrix\u002Fpicking-an-ssg-for-a-multi-language-documentation-site","Picking an SSG for a Multi-Language Docs Site",{"path":1706,"title":1707},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fssg-framework-selection-matrix\u002Fssg-selection-checklist-for-engineering-teams","SSG Selection Checklist for Engineering Teams",{"path":1709,"title":1710},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fssg-framework-selection-matrix\u002Ftotal-cost-of-ownership-for-static-site-generators","Total Cost of Ownership for Static Site Generators",{"path":1712,"title":1713},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fcdn-caching-rules-for-ssgs\u002Fcache-busting-with-content-hashed-filenames","Cache Busting with Content-Hashed Filenames",{"path":1715,"title":1716},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fcdn-caching-rules-for-ssgs","CDN Caching Rules for SSGs",{"path":1718,"title":1719},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fcdn-caching-rules-for-ssgs\u002Fpurging-the-cdn-cache-after-a-static-deploy","Purging the CDN Cache After a Static Deploy",{"path":1721,"title":1722},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fcdn-caching-rules-for-ssgs\u002Fsetting-cache-control-headers-on-cloudflare-pages","Cache-Control Headers on Cloudflare Pages",{"path":1724,"title":1725},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fcdn-caching-rules-for-ssgs\u002Fsetting-up-proper-cache-headers-on-netlify","Proper Cache Headers on Netlify for SSGs",{"path":1727,"title":1728},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fcdn-caching-rules-for-ssgs\u002Fstale-while-revalidate-for-static-html","Stale-While-Revalidate for Static HTML",{"path":1730,"title":1731},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fcumulative-layout-shift-fixes-for-static-sites\u002Feliminating-layout-shift-from-web-fonts","Eliminating Layout Shift From Web Fonts",{"path":1733,"title":1734},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fcumulative-layout-shift-fixes-for-static-sites\u002Ffixing-cls-from-cookie-banners","Fixing CLS from Cookie Banners",{"path":1736,"title":1737},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fcumulative-layout-shift-fixes-for-static-sites\u002Ffixing-cls-from-late-loading-embeds","Fixing CLS From Late-Loading Embeds",{"path":1739,"title":1740},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fcumulative-layout-shift-fixes-for-static-sites\u002Ffixing-cls-from-sticky-headers-and-anchor-links","Fixing CLS from Sticky Headers and Anchor Links",{"path":1742,"title":1743},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fcumulative-layout-shift-fixes-for-static-sites","Cumulative Layout Shift Fixes for Static Sites",{"path":1745,"title":1746},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fcumulative-layout-shift-fixes-for-static-sites\u002Fmeasuring-cls-in-the-field-with-web-vitals-js","Measuring CLS in the Field With web-vitals.js",{"path":1748,"title":1749},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fcumulative-layout-shift-fixes-for-static-sites\u002Freserving-space-for-images-and-embeds-to-stop-layout-shift","Reserving Space for Images and Embeds",{"path":1751,"title":1752},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Ffont-loading-strategies-for-static-sites\u002Ffont-display-optional-vs-swap","font-display: optional vs swap",{"path":1754,"title":1755},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Ffont-loading-strategies-for-static-sites","Font Loading Strategies for Static Sites",{"path":1757,"title":1758},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Ffont-loading-strategies-for-static-sites\u002Fmetric-matched-fallback-fonts-with-size-adjust","Metric-Matched Fallback Fonts with size-adjust",{"path":1760,"title":1761},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Ffont-loading-strategies-for-static-sites\u002Fpreloading-fonts-without-double-downloads","Preloading Fonts Without Double Downloads",{"path":1763,"title":1764},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Ffont-loading-strategies-for-static-sites\u002Fself-hosting-google-fonts-to-eliminate-layout-shift","Self-Host Google Fonts to Eliminate Layout Shift",{"path":1766,"title":1767},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Ffont-loading-strategies-for-static-sites\u002Fsubsetting-variable-fonts-for-faster-first-render","Subsetting Variable Fonts for Faster First Render",{"path":1769,"title":1770},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fimage-optimization-pipelines-in-astro\u002Fbuilding-an-image-cdn-pipeline-for-static-sites","Building an Image CDN Pipeline for Static Sites",{"path":1772,"title":1773},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fimage-optimization-pipelines-in-astro\u002Fgenerating-open-graph-images-at-build-time","Generating Open Graph Images at Build Time",{"path":1775,"title":1776},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fimage-optimization-pipelines-in-astro","Image Optimization Pipelines in Astro",{"path":1778,"title":1779},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fimage-optimization-pipelines-in-astro\u002Flazy-loading-images-without-hurting-lcp","Lazy-Loading Images Without Hurting LCP",{"path":1781,"title":1782},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fimage-optimization-pipelines-in-astro\u002Foptimizing-webp-images-in-hugo-without-plugins","Optimizing WebP Images in Hugo Without Plugins",{"path":1784,"title":1785},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fimage-optimization-pipelines-in-astro\u002Fresponsive-images-with-srcset-in-eleventy","Responsive Images with srcset in Eleventy",{"path":1787,"title":1788},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fimage-optimization-pipelines-in-astro\u002Fserving-avif-with-fallbacks-on-static-sites","Serving AVIF With Fallbacks on Static Sites",{"path":1790,"title":1791},"\u002Fperformance-optimization-core-web-vitals-for-ssgs","Core Web Vitals Optimization for SSGs",{"path":1793,"title":1794},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fjavascript-hydration-partial-rendering\u002Fastro-islands-vs-full-hydration-performance","Astro Islands vs Full Hydration Performance",{"path":1796,"title":1797},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fjavascript-hydration-partial-rendering\u002Fdeferring-hydration-with-client-visible-in-astro","Deferring Hydration with client:visible in Astro",{"path":1799,"title":1800},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fjavascript-hydration-partial-rendering\u002Fhow-to-reduce-bundle-size-in-eleventy-builds","How to Reduce Bundle Size in Eleventy Builds",{"path":1802,"title":1803},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fjavascript-hydration-partial-rendering","JavaScript Hydration & Partial Rendering",{"path":1805,"title":1806},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fjavascript-hydration-partial-rendering\u002Fmeasuring-inp-on-static-sites-with-real-user-monitoring","Measuring INP on Static Sites with RUM",{"path":1808,"title":1809},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fjavascript-hydration-partial-rendering\u002Freplacing-react-islands-with-web-components","Replacing React Islands with Web Components",{"path":1811,"title":1812},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Flargest-contentful-paint-optimization-for-static-sites\u002Feliminating-render-blocking-css-on-static-sites","Eliminating Render-Blocking CSS on Static Sites",{"path":1814,"title":1815},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Flargest-contentful-paint-optimization-for-static-sites\u002Ffixing-lcp-on-text-heavy-documentation-pages","Fixing LCP on Text-Heavy Documentation Pages",{"path":1817,"title":1818},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Flargest-contentful-paint-optimization-for-static-sites","Largest Contentful Paint Optimization for Static Sites",{"path":1820,"title":1821},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Flargest-contentful-paint-optimization-for-static-sites\u002Fmeasuring-lcp-subparts-with-devtools","Measuring LCP Subparts with DevTools",{"path":1823,"title":1824},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Flargest-contentful-paint-optimization-for-static-sites\u002Foptimizing-lcp-on-astro-with-priority-hints","Optimizing LCP on Astro with Priority Hints",{"path":1826,"title":1827},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Flargest-contentful-paint-optimization-for-static-sites\u002Freducing-lcp-from-hero-images-on-static-sites","Reducing LCP from Hero Images on Static Sites",{"path":1829,"title":1830},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fperformance-budgets-and-lighthouse-ci\u002Fcomparing-lab-and-field-data-with-crux","Comparing Lab and Field Data with CrUX",{"path":1832,"title":1833},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fperformance-budgets-and-lighthouse-ci","Performance Budgets and Lighthouse CI",{"path":1835,"title":1836},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fperformance-budgets-and-lighthouse-ci\u002Freducing-lighthouse-score-variance-in-ci","Reducing Lighthouse Score Variance in CI",{"path":1838,"title":1839},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fperformance-budgets-and-lighthouse-ci\u002Frunning-webpagetest-scripts-against-preview-deploys","Running WebPageTest Scripts Against Preview Deploys",{"path":1841,"title":1842},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fperformance-budgets-and-lighthouse-ci\u002Fsetting-up-lighthouse-ci-for-a-static-site","Setting Up Lighthouse CI for a Static Site",{"path":1844,"title":1845},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fperformance-budgets-and-lighthouse-ci\u002Ftracking-bundle-size-per-pull-request","Tracking Bundle Size per Pull Request",{"path":1847,"title":1848},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fperformance-budgets-and-lighthouse-ci\u002Fwriting-a-performance-budget-that-fails-builds","Writing a Performance Budget That Fails Builds",{"path":1850,"title":1851},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fresource-hints-and-navigation-speed\u002Fauditing-unused-preloads","Auditing Unused Preloads",{"path":1853,"title":1854},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fresource-hints-and-navigation-speed","Resource Hints and Navigation Speed",{"path":1856,"title":1857},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fresource-hints-and-navigation-speed\u002Finstant-navigation-with-speculation-rules","Instant Navigation with Speculation Rules",{"path":1859,"title":1860},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fresource-hints-and-navigation-speed\u002Fpreconnect-vs-dns-prefetch-on-static-sites","Preconnect vs DNS-Prefetch on Static Sites",{"path":1862,"title":1863},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fresource-hints-and-navigation-speed\u002Fprefetching-links-in-astro","Prefetching Links in Astro",{"path":1865,"title":1866},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fresource-hints-and-navigation-speed\u002Fview-transitions-on-multi-page-static-sites","View Transitions on Multi-Page Static Sites",{"path":1868,"title":1869},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fthird-party-script-performance-on-static-sites\u002Fauditing-third-party-scripts-with-lighthouse","Auditing Third-Party Scripts With Lighthouse",{"path":1871,"title":1872},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fthird-party-script-performance-on-static-sites","Third-Party Script Performance on Static Sites",{"path":1874,"title":1875},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fthird-party-script-performance-on-static-sites\u002Flazy-loading-youtube-embeds-on-static-sites","Lazy-Loading YouTube Embeds on Static Sites",{"path":1877,"title":1878},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fthird-party-script-performance-on-static-sites\u002Floading-google-tag-manager-without-hurting-inp","Loading Google Tag Manager Without Hurting INP",{"path":1880,"title":1881},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fthird-party-script-performance-on-static-sites\u002Frunning-third-party-scripts-in-a-web-worker-with-partytown","Running Third-Party Scripts in a Web Worker with Partytown",{"path":1883,"title":1884},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fthird-party-script-performance-on-static-sites\u002Fself-hosting-analytics-to-cut-third-party-requests","Self-Hosting Analytics to Cut Third-Party Requests",{"path":1886,"title":1887},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fcloudflare-pages-edge-caching-setup\u002Fautomating-eleventy-deployments-with-cloudflare-pages","Automating Eleventy Deployments on Cloudflare Pages",{"path":1889,"title":1890},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fcloudflare-pages-edge-caching-setup\u002Fconfiguring-redirects-on-cloudflare-pages","Configuring Redirects on Cloudflare Pages",{"path":1892,"title":1893},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fcloudflare-pages-edge-caching-setup\u002Fcustom-domains-and-tls-on-cloudflare-pages","Custom Domains and TLS on Cloudflare Pages",{"path":1895,"title":1896},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fcloudflare-pages-edge-caching-setup\u002Fdeploying-hugo-to-cloudflare-pages-and-workers","Deploying Hugo to Cloudflare Pages and Workers",{"path":1898,"title":1899},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fcloudflare-pages-edge-caching-setup","Cloudflare Pages Edge Caching Setup",{"path":1901,"title":1902},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fcloudflare-pages-edge-caching-setup\u002Fmigrating-from-cloudflare-pages-to-workers-static-assets","Migrating from Cloudflare Pages to Workers Static Assets",{"path":1904,"title":1905},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fcontent-workflows-for-documentation-teams\u002Fchecking-links-in-pull-requests","Checking Links in Pull Requests",{"path":1907,"title":1908},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fcontent-workflows-for-documentation-teams\u002Fdocs-as-code-review-workflow-for-writers","Docs-as-Code Review Workflow for Writers",{"path":1910,"title":1911},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fcontent-workflows-for-documentation-teams\u002Feditorial-checks-with-vale-in-ci","Editorial Checks with Vale in CI",{"path":1913,"title":1914},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fcontent-workflows-for-documentation-teams","Content Workflows for Documentation Teams",{"path":1916,"title":1917},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fcontent-workflows-for-documentation-teams\u002Fscheduling-content-publication-with-cron-triggered-builds","Scheduling Content Publication With Cron-Triggered Builds",{"path":1919,"title":1920},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fcontent-workflows-for-documentation-teams\u002Fwiring-a-headless-cms-to-a-static-build","Wiring a Headless CMS to a Static Build",{"path":1922,"title":1923},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fgithub-actions-for-automated-ssg-builds\u002Fbuilding-astro-sites-with-github-actions","Building Astro Sites with GitHub Actions",{"path":1925,"title":1926},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fgithub-actions-for-automated-ssg-builds\u002Fcaching-node-modules-in-github-actions-for-faster-ssg-builds","Caching node_modules in GitHub Actions",{"path":1928,"title":1929},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fgithub-actions-for-automated-ssg-builds\u002Fdeploying-to-github-pages-with-actions","Deploying to GitHub Pages with Actions",{"path":1931,"title":1932},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fgithub-actions-for-automated-ssg-builds\u002Fdeploying-to-multiple-environments-from-one-workflow","Deploying to Multiple Environments From One Workflow",{"path":1934,"title":1935},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fgithub-actions-for-automated-ssg-builds\u002Fhow-to-set-up-github-actions-for-hugo-deployments","GitHub Actions for Hugo Deployments",{"path":1937,"title":1938},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fgithub-actions-for-automated-ssg-builds","GitHub Actions for Automated SSG Builds",{"path":1940,"title":1941},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fgithub-actions-for-automated-ssg-builds\u002Fmatrix-builds-for-multi-site-monorepos","Matrix Builds for Multi-Site Monorepos",{"path":1943,"title":1944},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fincremental-builds-and-build-caching-for-ssgs\u002Fcaching-hugo-builds-in-github-actions","Caching Hugo Builds in GitHub Actions",{"path":1946,"title":1947},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fincremental-builds-and-build-caching-for-ssgs\u002Fenabling-incremental-builds-in-eleventy","Enabling Incremental Builds in Eleventy",{"path":1949,"title":1950},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fincremental-builds-and-build-caching-for-ssgs\u002Fincremental-builds-in-astro-with-the-content-layer","Incremental Builds in Astro with the Content Layer",{"path":1952,"title":1953},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fincremental-builds-and-build-caching-for-ssgs","Incremental Builds and Build Caching for SSGs",{"path":1955,"title":1956},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fincremental-builds-and-build-caching-for-ssgs\u002Fmeasuring-build-time-regressions-in-ci","Measuring Build-Time Regressions in CI",{"path":1958,"title":1959},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fincremental-builds-and-build-caching-for-ssgs\u002Fremote-caching-with-turborepo-for-ssg-monorepos","Remote Caching with Turborepo for SSG Monorepos",{"path":1961,"title":1962},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fincremental-builds-and-build-caching-for-ssgs\u002Fsharing-build-cache-across-ci-runners","Sharing Build Cache Across CI Runners",{"path":1964,"title":1965},"\u002Fproduction-ready-deployment-cicd-workflows","Production-Ready Deployment & CI\u002FCD for SSGs",{"path":1967,"title":1968},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fmonitoring-static-sites-in-production\u002Falerting-on-cache-hit-ratio-drops","Alerting on Cache Hit Ratio Drops",{"path":1970,"title":1971},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fmonitoring-static-sites-in-production\u002Fbuilding-a-core-web-vitals-dashboard-from-rum-data","Building a Core Web Vitals Dashboard from RUM Data",{"path":1973,"title":1974},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fmonitoring-static-sites-in-production\u002Fcrawling-for-broken-links-on-a-schedule","Crawling for Broken Links on a Schedule",{"path":1976,"title":1977},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fmonitoring-static-sites-in-production","Monitoring Static Sites in Production",{"path":1979,"title":1980},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fmonitoring-static-sites-in-production\u002Flogging-404s-at-the-edge","Logging 404s at the Edge",{"path":1982,"title":1983},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fmonitoring-static-sites-in-production\u002Fuptime-and-synthetic-checks-for-static-sites","Uptime and Synthetic Checks for Static Sites",{"path":1985,"title":1986},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fnetlify-vs-vercel-deployment-strategies\u002Fconfiguring-vercel-for-hugo-and-eleventy","Configuring Vercel for Hugo and Eleventy",{"path":1988,"title":1989},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fnetlify-vs-vercel-deployment-strategies","Netlify vs Vercel Deployment Strategies",{"path":1991,"title":1992},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fnetlify-vs-vercel-deployment-strategies\u002Fnetlify-build-hooks-for-content-updates","Netlify Build Hooks for Content Updates",{"path":1994,"title":1995},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fnetlify-vs-vercel-deployment-strategies\u002Fnetlify-redirects-and-rewrites-for-static-sites","Netlify Redirects and Rewrites for Static Sites",{"path":1997,"title":1998},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fnetlify-vs-vercel-deployment-strategies\u002Fsetting-up-deploy-previews-on-netlify-for-every-pull-request","Netlify Deploy Previews for Every Pull Request",{"path":2000,"title":2001},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fnetlify-vs-vercel-deployment-strategies\u002Fvercel-isr-vs-static-generation-for-ssgs","Vercel ISR vs Static Generation for SSGs",{"path":2003,"title":2004},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fpreview-environments-for-pull-requests\u002Fautomating-preview-deploy-pipelines-with-github-actions","Automating Preview Deploy Pipelines with GitHub Actions",{"path":2006,"title":2007},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fpreview-environments-for-pull-requests\u002Fcleaning-up-stale-preview-deployments","Cleaning Up Stale Preview Deployments",{"path":2009,"title":2010},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fpreview-environments-for-pull-requests","Preview Environments for Pull Requests",{"path":2012,"title":2013},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fpreview-environments-for-pull-requests\u002Fpassword-protecting-preview-deployments","Password-Protecting Preview Deployments",{"path":2015,"title":2016},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fpreview-environments-for-pull-requests\u002Fpreviewing-headless-cms-drafts","Previewing Headless CMS Drafts",{"path":2018,"title":2019},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fpreview-environments-for-pull-requests\u002Fvisual-regression-testing-on-preview-deploys","Visual Regression Testing on Preview Deploys",{"path":2021,"title":2022},"\u002Fproduction-ready-deployment-cicd-workflows\u002Frollbacks-and-deploy-safety-for-static-sites\u002Fatomic-deploys-vs-incremental-uploads","Atomic Deploys vs Incremental Uploads",{"path":2024,"title":2025},"\u002Fproduction-ready-deployment-cicd-workflows\u002Frollbacks-and-deploy-safety-for-static-sites\u002Fcanary-releases-for-static-sites","Canary Releases for Static Sites",{"path":2027,"title":2028},"\u002Fproduction-ready-deployment-cicd-workflows\u002Frollbacks-and-deploy-safety-for-static-sites\u002Ffeature-flags-on-static-sites","Feature Flags on Static Sites",{"path":2030,"title":2031},"\u002Fproduction-ready-deployment-cicd-workflows\u002Frollbacks-and-deploy-safety-for-static-sites","Rollbacks and Deploy Safety for Static Sites",{"path":2033,"title":2034},"\u002Fproduction-ready-deployment-cicd-workflows\u002Frollbacks-and-deploy-safety-for-static-sites\u002Frolling-back-a-bad-static-deploy-in-under-a-minute","Rolling Back a Bad Static Deploy in Under a Minute",{"path":2036,"title":2037},"\u002Fproduction-ready-deployment-cicd-workflows\u002Frollbacks-and-deploy-safety-for-static-sites\u002Frunning-smoke-tests-against-a-preview-url","Running Smoke Tests Against a Preview URL",{"path":2039,"title":2040},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fsecurity-headers-for-static-sites\u002Fauditing-npm-dependencies-in-ssg-pipelines","Auditing npm Dependencies in SSG Pipelines",{"path":2042,"title":2043},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fsecurity-headers-for-static-sites\u002Fenabling-hsts-and-preload-safely","Enabling HSTS and Preload Safely",{"path":2045,"title":340},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fsecurity-headers-for-static-sites\u002Fhash-based-csp-for-inline-scripts-in-astro",{"path":2047,"title":33},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fsecurity-headers-for-static-sites",{"path":2049,"title":2050},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fsecurity-headers-for-static-sites\u002Fsecuring-deploy-credentials-with-github-oidc","Securing Deploy Credentials with GitHub OIDC",{"path":2052,"title":1481},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fsecurity-headers-for-static-sites\u002Fsubresource-integrity-for-third-party-assets",{"path":1543,"title":5},{"path":2055,"title":2056},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fself-hosting-static-sites\u002Fclean-urls-and-trailing-slashes-on-s3","Clean URLs and Trailing Slashes on S3",{"path":2058,"title":2059},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fself-hosting-static-sites\u002Fcloudfront-functions-for-redirects","CloudFront Functions for Redirects",{"path":2061,"title":2062},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fself-hosting-static-sites\u002Fdeploying-a-static-site-to-s3-and-cloudfront","Deploying a Static Site to S3 and CloudFront",{"path":2064,"title":2065},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fself-hosting-static-sites","Self-Hosting Static Sites on S3, Nginx and Caddy",{"path":2067,"title":2068},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fself-hosting-static-sites\u002Fserving-a-static-site-with-caddy","Serving a Static Site with Caddy",{"path":2070,"title":2071},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fself-hosting-static-sites\u002Fserving-a-static-site-with-nginx","Serving a Static Site with Nginx",{"path":2073,"title":2074},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fself-hosting-static-sites\u002Fzero-downtime-deploys-with-symlink-swaps","Zero-Downtime Deploys with Symlink Swaps",{"path":2076,"title":2077},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fserverless-functions-for-static-sites\u002Fadding-a-contact-form-with-cloudflare-workers","Adding a Contact Form with Cloudflare Workers",{"path":2079,"title":1498},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fserverless-functions-for-static-sites\u002Fhandling-form-submissions-on-a-static-site",{"path":2081,"title":2082},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fserverless-functions-for-static-sites","Serverless Functions for Static Sites",{"path":2084,"title":2085},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fserverless-functions-for-static-sites\u002Fnetlify-functions-vs-cloudflare-workers","Netlify Functions vs Cloudflare Workers",{"path":2087,"title":2088},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fserverless-functions-for-static-sites\u002Fprotecting-a-static-site-behind-authentication","Protecting a Static Site Behind Authentication",{"path":2090,"title":2091},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fserverless-functions-for-static-sites\u002Fproxying-third-party-apis-from-an-edge-function","Proxying Third-Party APIs from an Edge Function",1789722847321]