and extracts the following text as a script body — the dev server then fails its dependency scan with `Expected ";" but found "non"` from the words "non-allowlisted hosts", which breaks e2e. So, what this buys, so nobody reads more or less into it: blocks external `script src=` from non-allowlisted hosts blocks injected inline scripts — each one is pinned by hash blocks fetch/XHR/WebSocket exfiltration (connect-src allowlist) blocks form-action, base-uri, object-src vectors does not stop image-based exfiltration — img-src must allow https: because event media comes from arbitrary publishers' og:image The cost of hashing is that an inline script edited after the hashes are computed is silently refused by the browser. That is why the violation reporter below exists: report-uri/report-to are ignored in a meta element and Pages serves no CSP header, so violations are caught in-page and sent to PostHog instead (src/lib/csp-report.ts, #241). frame-ancestors is deliberately NOT in this string: it is ignored in a meta element and browsers log a warning about it on every page load. It lives in public/_headers instead, ready for a CDN in front of Pages. X-Frame-Options (set there too) is the clickjacking control that actually applies today. */ }
milestone

Debí Tirar Más Fotos World Tour Closes in Brussels — $467.5M Gross, Highest-Grossing Tour Ever by a Latin Artist

| Bad Bunny

Bad Bunny closes the 55-date Debí Tirar Más Fotos World Tour at King Baudouin Stadium in Brussels (July 22, 2026), with Jowell & Randy making a surprise appearance. Launched November 21, 2025 in Santo Domingo and spanning the Americas, Asia, Oceania, and Europe, the tour sold over 3.1 million tickets and grossed approximately $467.5 million — the highest-grossing tour ever by a Latin artist — and returned Bad Bunny to No. 1 on Billboard's monthly Top Tours chart for a record-extending 10th time. The tour's Italian leg had ended early on July 18 when a violent hailstorm forced the cancellation of the second Milan show at Ippodromo SNAI La Maura.

Media

Bad Bunny performs with Jowell & Randy at the Debí Tirar Más Fotos World Tour finale, King Baudouin Stadium, Brussels, July 22, 2026
Bad Bunny performs with Jowell & Randy at the Debí Tirar Más Fotos World Tour finale, King Baudouin Stadium, Brussels, July 22, 2026 — LaMezcla (photo: Eric Rojas)

Sources

View full Bad Bunny dashboard