revert the homepage JSON-LD: application/ld+json is still an inline script under script-src 'self', and the no-inline-script posture is worth more than the structured data
build-and-deploy / build (push) Successful in 15s
build-and-deploy / build (push) Successful in 15s
This commit is contained in:
@@ -53,26 +53,6 @@ const ogImage = new URL(site.ogImage, site.url).href;
|
|||||||
<!-- Single external script: pre-paint theme + toggle + scroll reveal.
|
<!-- Single external script: pre-paint theme + toggle + scroll reveal.
|
||||||
Blocking in <head> so the theme is set before first paint (no flash).
|
Blocking in <head> so the theme is set before first paint (no flash).
|
||||||
No inline JS anywhere on the site → strict CSP script-src 'self'. -->
|
No inline JS anywhere on the site → strict CSP script-src 'self'. -->
|
||||||
{path === "/" && (
|
|
||||||
<script
|
|
||||||
type="application/ld+json"
|
|
||||||
is:inline
|
|
||||||
set:html={JSON.stringify({
|
|
||||||
"@context": "https://schema.org",
|
|
||||||
"@graph": [
|
|
||||||
{
|
|
||||||
"@type": "Person",
|
|
||||||
"name": site.name,
|
|
||||||
"jobTitle": site.role,
|
|
||||||
"url": site.url,
|
|
||||||
"address": { "@type": "PostalAddress", "addressLocality": site.location },
|
|
||||||
"knowsAbout": ["Kubernetes", "GitOps", "Infrastructure as Code", "Platform Engineering"],
|
|
||||||
},
|
|
||||||
{ "@type": "WebSite", "name": site.name, "url": site.url },
|
|
||||||
],
|
|
||||||
})}
|
|
||||||
/>
|
|
||||||
)}
|
|
||||||
<script is:inline src="/site.js"></script>
|
<script is:inline src="/site.js"></script>
|
||||||
</head>
|
</head>
|
||||||
<body>
|
<body>
|
||||||
|
|||||||
Reference in New Issue
Block a user