and extracts the following text as a script body — the dev server then fails its dependency scan with `Expected ";" but found "non"` from the words "non-allowlisted hosts", which breaks e2e. So, what this buys, so nobody reads more or less into it: blocks external `script src=` from non-allowlisted hosts blocks injected inline scripts — each one is pinned by hash blocks fetch/XHR/WebSocket exfiltration (connect-src allowlist) blocks form-action, base-uri, object-src vectors does not stop image-based exfiltration — img-src must allow https: because event media comes from arbitrary publishers' og:image The cost of hashing is that an inline script edited after the hashes are computed is silently refused by the browser. That is why the violation reporter below exists: report-uri/report-to are ignored in a meta element and Pages serves no CSP header, so violations are caught in-page and sent to PostHog instead (src/lib/csp-report.ts, #241). frame-ancestors is deliberately NOT in this string: it is ignored in a meta element and browsers log a warning about it on every page load. It lives in public/_headers instead, ready for a CDN in front of Pages. X-Frame-Options (set there too) is the clickjacking control that actually applies today. */ }
diplomatic high confidence

Af-Pak Non-Escalation Holds Day 15; Pakistan-Iran Diplomacy Continues; Afghan Deportations Reach ~147,000

| Afghanistan War

April 24, 2026 marks the 15th consecutive day without major cross-border military incidents between Afghanistan and Pakistan under the Urumqi non-escalation framework — extending the longest unbroken lull since Operation Ghazab-il-Haq commenced on February 26, 2026. Both Taliban and Pakistani officials maintained their commitment to Urumqi Round 2, expected in mid-to-late May, though no date has been formally confirmed. Pakistan's Foreign Minister Ishaq Dar and Army Chief Field Marshal Asim Munir continued active diplomatic engagement on April 24, speaking with Iranian Foreign Minister Abbas Araghchi about 'regional developments and issues related to the ceasefire' — underscoring Pakistan's continued central mediating role in the indefinitely-extended US-Iran ceasefire agreed April 22. The dual diplomatic track — simultaneously pursuing Af-Pak peace via the Urumqi framework while serving as primary US-Iran intermediary — has elevated Islamabad's international standing in April 2026, but has also stretched Pakistan's diplomatic bandwidth to its limits, with the Af-Pak file effectively deferred to May. On the humanitarian front, the Afghan refugee deportation crisis continued to deepen. Pakistan has expelled approximately 147,000 Afghans in 2026 alone per updated HRW/UNHCR tracking, with the pace accelerating sharply since April 1. Pakistani authorities frame the deportations as a security imperative linked to counter-TTP operations and border militarization. The Taliban government has vocally condemned the deportations as a violation of bilateral understanding, while international human rights organizations pressed Pakistan to halt forced returns pending proper refugee status determination. Reporters Without Borders confirmed at least 9 Afghan journalists with valid documentation were forcibly returned to Taliban rule, where press freedom is effectively nonexistent. No major military operations, airstrikes, or cross-border incidents were reported on April 24. The underlying TTP dispute — Pakistan demanding the Taliban expel or neutralize an estimated 6,000+ TTP fighters from Afghan soil, and the Taliban's counter-demand that Pakistan cease alleged ISI contacts with anti-Taliban armed factions — remains entirely unresolved and is the central agenda item awaiting Urumqi Round 2.

📄 Read article
Pakistan FM Dar and Army Chief Munir continue Iran ceasefire diplomacy; Af-Pak non-escalation holds Day 15 as Afghan deportation crisis deepens — Philadelphia Inquirer
📄 Read article
HRW: Pakistan deporting 147,000+ Afghans in 2026, including journalists and activists facing Taliban persecution — Human Rights Watch