and extracts the following text as a script body — the dev server then fails its dependency scan with `Expected ";" but found "non"` from the words "non-allowlisted hosts", which breaks e2e. So, what this buys, so nobody reads more or less into it: blocks external `script src=` from non-allowlisted hosts blocks injected inline scripts — each one is pinned by hash blocks fetch/XHR/WebSocket exfiltration (connect-src allowlist) blocks form-action, base-uri, object-src vectors does not stop image-based exfiltration — img-src must allow https: because event media comes from arbitrary publishers' og:image The cost of hashing is that an inline script edited after the hashes are computed is silently refused by the browser. That is why the violation reporter below exists: report-uri/report-to are ignored in a meta element and Pages serves no CSP header, so violations are caught in-page and sent to PostHog instead (src/lib/csp-report.ts, #241). frame-ancestors is deliberately NOT in this string: it is ignored in a meta element and browsers log a warning about it on every page load. It lives in public/_headers instead, ready for a CDN in front of Pages. X-Frame-Options (set there too) is the clickjacking control that actually applies today. */ }

milestone high confidence

SLS/Orion Rolls Out to Launch Pad 39B

March 20, 2026 | Artemis II

NASA's crawler-transporter 2 carried the fully stacked Artemis II SLS Block 1 rocket and Orion spacecraft from the Vehicle Assembly Building to Launch Complex 39B at Kennedy Space Center, arriving at 11:21 a.m. EDT after an 11-hour, 4-mile journey. This was the second rollout to the pad after the February 2026 rollback to fix a helium supply line blockage in the ICPS upper stage. The rocket is configured for a launch no earlier than April 1, 2026, targeting a 6:24 p.m. EDT liftoff with a backup window extending through April 6.

Media

SLS/Orion rolls out to Launch Pad 39B at Kennedy Space Center — SpaceNews

Sources

T1 NASA Blog: Artemis II Rocket Arrives at LC-39B Official western
T2 Space.com Live Coverage: Rollout March 20, 2026 Major western

View full Artemis II dashboard