Cloud Security intermediate
Hardening a Static Site on Cloudflare: TLS, Headers and a Hash-Based CSP
The security configuration behind this site: a per-page Content Security Policy with script hashes and no unsafe-inline, hardening headers served from Workers static assets, and the zone settings that back them up.