and extracts the following text as a script body — the dev server then fails its dependency scan with `Expected ";" but found "non"` from the words "non-allowlisted hosts", which breaks e2e. So, what this buys, so nobody reads more or less into it: blocks external `script src=` from non-allowlisted hosts blocks injected inline scripts — each one is pinned by hash blocks fetch/XHR/WebSocket exfiltration (connect-src allowlist) blocks form-action, base-uri, object-src vectors does not stop image-based exfiltration — img-src must allow https: because event media comes from arbitrary publishers' og:image The cost of hashing is that an inline script edited after the hashes are computed is silently refused by the browser. That is why the violation reporter below exists: report-uri/report-to are ignored in a meta element and Pages serves no CSP header, so violations are caught in-page and sent to PostHog instead (src/lib/csp-report.ts, #241). frame-ancestors is deliberately NOT in this string: it is ignored in a meta element and browsers log a warning about it on every page load. It lives in public/_headers instead, ready for a CDN in front of Pages. X-Frame-Options (set there too) is the clickjacking control that actually applies today. */ }
military high confidence

Pakistan Kills Afghan National Ubaidullah Saad, Fitna al-Khawarij Commander, in Kurram District Operation

| Afghanistan War

Pakistani security forces killed four Fitna al-Khawarij (TTP) militants, including Afghan national Ubaidullah Saad, in an intelligence-based operation in Kurram district, Khyber Pakhtunkhwa, on September 8, 2026. ISPR identified Saad as the son of Ghulam Ghaus Salehi, a resident of Shah Qila village in Afghanistan's Logar province, and described him as a key militant commander involved in multiple terrorist activities inside Pakistan. The military said security forces would continue operations 'without discrimination against anti-state elements infiltrating Pakistan from Afghanistan' and reiterated that repeated cross-border incidents showed Afghan Taliban authorities had failed to prevent their territory from being used for militant activity.

Media

Security forces killed four Fitna al-Khawarij militants, including Afghan national Ubaidullah Saad, in a Kurram district operation on September 8, 2026.
Security forces killed four Fitna al-Khawarij militants, including Afghan national Ubaidullah Saad, in a Kurram district operation on September 8, 2026. — ARY News

Sources

View full Afghanistan War dashboard