and extracts the following text as a script body — the dev server then fails its dependency scan with `Expected ";" but found "non"` from the words "non-allowlisted hosts", which breaks e2e. So, what this buys, so nobody reads more or less into it: blocks external `script src=` from non-allowlisted hosts blocks injected inline scripts — each one is pinned by hash blocks fetch/XHR/WebSocket exfiltration (connect-src allowlist) blocks form-action, base-uri, object-src vectors does not stop image-based exfiltration — img-src must allow https: because event media comes from arbitrary publishers' og:image The cost of hashing is that an inline script edited after the hashes are computed is silently refused by the browser. That is why the violation reporter below exists: report-uri/report-to are ignored in a meta element and Pages serves no CSP header, so violations are caught in-page and sent to PostHog instead (src/lib/csp-report.ts, #241). frame-ancestors is deliberately NOT in this string: it is ignored in a meta element and browsers log a warning about it on every page load. It lives in public/_headers instead, ready for a CDN in front of Pages. X-Frame-Options (set there too) is the clickjacking control that actually applies today. */ }
military high confidence

Six Soldiers Killed in IED Attack on KP Convoy as Pakistan Reports 10 Militants Killed in North Waziristan, Hangu Operations

| Afghanistan War

Pakistan's ISPR said Thursday, September 17, 2026 that six soldiers were martyred and 10 militants killed during a series of counter-terrorism engagements in Khyber Pakhtunkhwa between September 15-17. In North Waziristan district, troops conducted an intelligence-based operation (IBO) after reports of militant presence; ISPR said 'own troops effectively engaged the khawarij location and after intense exchange of fire, six khawarij belonging to Indian-sponsored Fitna al-Khawarij were sent to hell,' with weapons and ammunition recovered. In a separate encounter in Hangu district, security forces neutralised four more militants. Separately on September 17, an IED planted by militants detonated on a security forces convoy, killing six soldiers; ISPR said 'six brave sons of the soil rendered the ultimate sacrifice.' ISPR reaffirmed its commitment to counter-terrorism operations under the 'Azm-e-Istehkam' framework; no specific unit designations were disclosed.

Media

Pakistani security forces patrol Khyber Pakhtunkhwa, where ISPR reported 10 militants killed and 6 soldiers martyred in operations between September 15-17, 2026.
Pakistani security forces patrol Khyber Pakhtunkhwa, where ISPR reported 10 militants killed and 6 soldiers martyred in operations between September 15-17, 2026. — The Express Tribune

Sources

View full Afghanistan War dashboard