A security.txt for researchers, a sitemap named in robots.txt, and HSTS. Its content security policy runs in report-only mode, so the browser logs violations but blocks nothing.The lesson for every team: Read the reports for a few weeks, fix what they flag, then switch the header to Content-Security-Policy.One automated analysis of public pages on 19 Oct 2026. A starting point, not a verdict. How the review works, step by step: carlosandmunoz.com/qa-review-guide.html#WebSecurity #CSP #Humanitarian #QA #QAlab
The ICRC tests a CSP. Now it can enforce it.
A security.txt for researchers, a sitemap named in robots.txt, and HSTS. Its content security policy runs in report-only mode, so the browser logs violations but blocks nothing.
The lesson for every team: Read the reports for a few weeks, fix what they flag, then switch the header to Content-Security-Policy.
One automated analysis of public pages on 19 Oct 2026. A starting point, not a verdict.
How the review works, step by step: https://carlosandmunoz.com/qa-review-guide.html?utm_source=linkedin&utm_medium=social&utm_campaign=runs-100-2026-11&utm_content=icrc
#WebSecurity #CSP #Humanitarian #QA #QAlab
X
The ICRC tests a CSP. Now it can enforce it.
Read the reports for a few weeks, fix what they flag, then switch the header to Content-Security-Policy.
carlosandmunoz.com/qa-review-guide?utm_source=x&utm_medium=social&utm_campaign=runs-100-2026-11&utm_content=icrc
#QAlab
Instagram
The ICRC tests a CSP. Now it can enforce it.
A security.txt for researchers, a sitemap named in robots.txt, and HSTS. Its content security policy runs in report-only mode, so the browser logs violations but blocks nothing.
Lesson: Read the reports for a few weeks, fix what they flag, then switch the header to Content-Security-Policy.
One automated analysis of public pages on 19 Oct 2026. A starting point, not a verdict.
Guide: link in bio.
#WebSecurity #CSP #Humanitarian #QA #WebDev #QAlab
Facebook
The ICRC tests a CSP. Now it can enforce it.
A security.txt for researchers, a sitemap named in robots.txt, and HSTS. Its content security policy runs in report-only mode, so the browser logs violations but blocks nothing.
Lesson: Read the reports for a few weeks, fix what they flag, then switch the header to Content-Security-Policy.
One automated analysis of public pages on 19 Oct 2026. A starting point, not a verdict.
https://carlosandmunoz.com/qa-review-guide.html?utm_source=facebook&utm_medium=social&utm_campaign=runs-100-2026-11&utm_content=icrc
#QAlab
TikTok
The ICRC tests a CSP. Now it can enforce it. Read the reports for a few weeks, fix what they flag, then switch the header to Content-Security-Policy. #WebSecurity #CSP #Humanitarian #QA #techtok #QAlab
YouTube
A security.txt for researchers, a sitemap named in robots.txt, and HSTS. Its content security policy runs in report-only mode, so the browser logs violations but blocks nothing.
Lesson: Read the reports for a few weeks, fix what they flag, then switch the header to Content-Security-Policy.
One automated analysis of public pages on 19 Oct 2026. A starting point, not a verdict.
Guide: https://carlosandmunoz.com/qa-review-guide.html?utm_source=youtube&utm_medium=social&utm_campaign=runs-100-2026-11&utm_content=icrc
Real runs · QA-lab URL Review
