and extracts the following text as a script body — the dev server then fails its dependency scan with `Expected ";" but found "non"` from the words "non-allowlisted hosts", which breaks e2e. So, what this buys, so nobody reads more or less into it: blocks external `script src=` from non-allowlisted hosts blocks injected inline scripts — each one is pinned by hash blocks fetch/XHR/WebSocket exfiltration (connect-src allowlist) blocks form-action, base-uri, object-src vectors does not stop image-based exfiltration — img-src must allow https: because event media comes from arbitrary publishers' og:image The cost of hashing is that an inline script edited after the hashes are computed is silently refused by the browser. That is why the violation reporter below exists: report-uri/report-to are ignored in a meta element and Pages serves no CSP header, so violations are caught in-page and sent to PostHog instead (src/lib/csp-report.ts, #241). frame-ancestors is deliberately NOT in this string: it is ignored in a meta element and browsers log a warning about it on every page load. It lives in public/_headers instead, ready for a CDN in front of Pages. X-Frame-Options (set there too) is the clickjacking control that actually applies today. */ }
attack high confidence

TTP Resumes Full-Pace Attacks in Pakistan Alongside Af-Pak Conflict

| Afghanistan War

The Tehrik-e-Taliban Pakistan continued its attacks inside Pakistan in Khyber Pakhtunkhwa province and the tribal belt following the expiry of its own three-day Eid ceasefire on March 24. TTP attacks formed a parallel layer of violence embedded within the broader Afghanistan-Pakistan state-level conflict. Pakistan's military faced a dual-front challenge: direct confrontation with Afghan Taliban border forces and counterterrorism operations against TTP inside Pakistan. Security analysts from PICSS noted that Pakistan's security landscape remained 'persistently violent' in the March 19-29 window, with TTP conducting bombings, ambushes, and targeted killings in Bajaur, Khyber, Waziristan, and Tank districts. The TTP operates from Afghan territory with the tacit tolerance of the Afghan Taliban — the core grievance driving Pakistan's military operations — creating a conflict-within-a-conflict dynamic that makes any negotiated settlement structurally complex.

Sources

  • T3 PICSS Institutional eastern
  • T2 Dawn Major eastern
  • T2 Geo News Major eastern
View full Afghanistan War dashboard