From c31e8bfa414cdc1fe035a5d6d55a477f77525dd7 Mon Sep 17 00:00:00 2001 From: Christian Cleberg Date: Mon, 3 Aug 2026 15:25:59 -0500 Subject: remove bubbles.town vote widget, keep comment link Drop the third-party vote.js script and its mount div so posts no longer auto-fetch from bubbles.town (174 pages), completing onion self-containment. The opt-in 'comment on Bubbles' link stays. Remove the now-orphaned .bubbles-vote CSS rule. --- README.md | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) (limited to 'README.md') diff --git a/README.md b/README.md index eb3fe9a..abd8fa4 100644 --- a/README.md +++ b/README.md @@ -118,8 +118,10 @@ absolute `img.cleberg.net` URLs, so local previews load images from the live host and need no symlink. Once assets are same-origin, the vhost CSP can tighten `img-src`, -`style-src`, and `font-src` back to `'self'`. After deploying, purge the -Cloudflare cache (responses carry a 31-day `max-age`). +`style-src`, and `font-src` back to `'self'`, and drop `bubbles.town` +from `script-src`/`connect-src` (the vote widget was removed; only a +plain link to Bubbles remains). After deploying, purge the Cloudflare +cache (responses carry a 31-day `max-age`). ## Creating New Blog Posts -- cgit v1.2.3