and extracts the following text as a script body — the dev server then fails its dependency scan with `Expected ";" but found "non"` from the words "non-allowlisted hosts", which breaks e2e. So, what this buys, so nobody reads more or less into it: blocks external `script src=` from non-allowlisted hosts blocks injected inline scripts — each one is pinned by hash blocks fetch/XHR/WebSocket exfiltration (connect-src allowlist) blocks form-action, base-uri, object-src vectors does not stop image-based exfiltration — img-src must allow https: because event media comes from arbitrary publishers' og:image The cost of hashing is that an inline script edited after the hashes are computed is silently refused by the browser. That is why the violation reporter below exists: report-uri/report-to are ignored in a meta element and Pages serves no CSP header, so violations are caught in-page and sent to PostHog instead (src/lib/csp-report.ts, #241). frame-ancestors is deliberately NOT in this string: it is ignored in a meta element and browsers log a warning about it on every page load. It lives in public/_headers instead, ready for a CDN in front of Pages. X-Frame-Options (set there too) is the clickjacking control that actually applies today. */ }
military high confidence

Pakistan Kills 71 TTP Militants in North Waziristan; Af-Pak Non-Escalation Holds Day 16; First Nuristan Humanitarian Access in 6 Weeks

| Afghanistan War

April 25, 2026: Pakistan's armed forces killed at least 71 Tehrik-i-Taliban Pakistan (TTP) militants in heavy clashes that began on April 25 as a major TTP column attempted to infiltrate Khyber Pakhtunkhwa's North Waziristan district from Afghanistan. The infiltration attempt — the largest since the Urumqi non-escalation framework began on April 9 — came in the immediate aftermath of the April 15 Mastung bus bombing, in which TTP militants killed passengers traveling in Balochistan. Pakistani security forces detected the cross-border movement and engaged the infiltrators in sustained firefights that continued through April 27. The operation confirmed TTP's ongoing use of Afghan territory as a staging area for attacks on Pakistan, even as direct Taliban-Pakistan inter-state hostilities remained paused under the Urumqi framework. April 25 marked the 16th consecutive day without major cross-border military incidents between Afghanistan's Islamic Emirate (IEA) and Pakistani state forces — the longest sustained non-escalation since Operation Ghazab-il-Haq launched on February 26, 2026. The TTP North Waziristan infiltration attempt is analytically distinct from the Taliban-Pakistan bilateral framework: TTP operates from Afghan soil with Taliban tolerance but technically outside Taliban command authority. Pakistan's security forces treated the engagement as an internal counter-terrorism operation rather than a cross-border violation of the Urumqi framework, avoiding any diplomatic escalation that would jeopardize Urumqi Round 2 — still expected in mid-to-late May with no formal date confirmed. On the humanitarian front, UN OCHA confirmed on April 25 that humanitarian operations had reached conflict-affected communities in eastern Nuristan Province — the first aid delivery to the area in over six weeks. Nuristan, cut off since early March by the intensity of Pakistan's Operation Ghazab-il-Haq strikes in adjacent Kunar and Nangarhar provinces, had been among the most isolated affected areas: an estimated 100,000 people in the province had been cut off from aid as of early April per OCHA. The April 25 delivery represents the first restoration of humanitarian access since the non-escalation framework reduced active military pressure in eastern Afghanistan. In a separate development, Afghanistan's Islamic Emirate foreign ministry issued a public statement on April 25 calling on Afghan nationals who assisted U.S. forces during the 20-year war and are currently stranded in Qatar to return home, asserting they would face no security risks. The statement came as the Trump administration was reportedly weighing options to relocate approximately 1,100 Afghan allies and their families — who have been in Qatar in legal limbo — to third countries including the Democratic Republic of Congo. Human rights organizations criticized the Congo relocation option as potentially dangerous. The Taliban's public claim that former U.S. collaborators face no risk is disputed by human rights monitors who document Taliban persecution of former government employees, soldiers, and translators.

Pakistani forces engage TTP militants attempting cross-border infiltration from Afghanistan into North Waziristan; 71 killed in April 25-27 clashes
Pakistani forces engage TTP militants attempting cross-border infiltration from Afghanistan into North Waziristan; 71 killed in April 25-27 clashes — KabulNow
UN OCHA confirms first humanitarian aid delivery to Nuristan Province in over 6 weeks — conflict had cut off an estimated 100,000 residents
UN OCHA confirms first humanitarian aid delivery to Nuristan Province in over 6 weeks — conflict had cut off an estimated 100,000 residents — Manila Times / UN OCHA
Taliban's IEA foreign ministry calls on Afghan US war helpers stranded in Qatar to return home, as Trump admin weighs Congo relocation option
Taliban's IEA foreign ministry calls on Afghan US war helpers stranded in Qatar to return home, as Trump admin weighs Congo relocation option — WSLS News