Security - Tag - arleo.eu

Security

2026

CSP A+ on Hugo + Cloudflare: from hash-based to origin allowlist, auto-monitoring and hardening 05-28

CrowdSec AppSec + OpenResty: Modern WAF Without ModSecurity 05-18

SRI on Hugo: automated hashes, auto-update and BetterStack alerting 05-17

CSP Hash on Hugo: migrating from nonce to hash to preserve CDN cache 05-16

NUC Security Audit: ModSecurity Removed, 500 MB Recovered 05-14

MCP security sprint delivered: v1.9.0, 10 chantiers, hardened ecosystem 05-09

Roadmap: MCP Security Sprint — 4 domains, 10 chantiers (DELIVERED ✅) 05-09

systemd hardening: taking a Python service from 9.6 to 1.7 05-09

From 46 Hashes to Zero: Migrating CSP to Dynamic Nonces 04-15