CSP A+ on Hugo + Cloudflare: from hash-based to origin allowlist, auto-monitoring and hardening 05-28
