and extracts the following text as a script body — the dev server then fails its dependency scan with `Expected ";" but found "non"` from the words "non-allowlisted hosts", which breaks e2e. So, what this buys, so nobody reads more or less into it: blocks external `script src=` from non-allowlisted hosts blocks injected inline scripts — each one is pinned by hash blocks fetch/XHR/WebSocket exfiltration (connect-src allowlist) blocks form-action, base-uri, object-src vectors does not stop image-based exfiltration — img-src must allow https: because event media comes from arbitrary publishers' og:image The cost of hashing is that an inline script edited after the hashes are computed is silently refused by the browser. That is why the violation reporter below exists: report-uri/report-to are ignored in a meta element and Pages serves no CSP header, so violations are caught in-page and sent to PostHog instead (src/lib/csp-report.ts, #241). frame-ancestors is deliberately NOT in this string: it is ignored in a meta element and browsers log a warning about it on every page load. It lives in public/_headers instead, ready for a CDN in front of Pages. X-Frame-Options (set there too) is the clickjacking control that actually applies today. */ }
milestone

Esencia Developers, DRNA, and Cabo Rojo's Mayor Set Conditions on $2.5B Project as Senate Reconvenes

| Bad Bunny

Five days after water, power, and tourism agencies testified against Proyecto Esencia — the Cabo Rojo megaproject Bad Bunny demanded be "canceled" from the Hiram Bithorn stage on Aug. 22-23 — the Puerto Rico Senate's Commission on Innovation, Reform and Appointments, chaired by Thomas Rivera Schatz, reconvened for a second public hearing that struck a markedly different tone. Roberto Ruiz Vargas, representing developers Cabo Rojo Land Acquisition, LLC and Three Rules Capital, LLC, submitted a 348-page presentation arguing the now-$2.5 billion project would not connect to the AAA water system or the AEE electric grid at all — relying instead on private deep wells, reverse osmosis, wastewater reuse, rainwater collection, and a solar-plus-battery microgrid — and said density had been cut 76% from prior approvals with 75% of the land kept as green space. DRNA Secretary Waldemar Quiles Pérez said his agency's role is not to "promote or stop projects based on ideological criteria or political pressures" and that he has a "ministerial and legal obligation" to grant a water-extraction franchise if the developer proves it won't deplete aquifers or trigger saltwater intrusion; OGPe Assistant Secretary Edmée Zeidan Cuebas denied the project received preferential treatment, and Planning Board President Héctor A. Morales Martínez confirmed the environmental assessment had been approved. Cabo Rojo Mayor Jorge Morales Wiscovitch struck a conditional stance — "Cabo Rojo no está vendiendo su pueblo" ("Cabo Rojo is not selling its town") — demanding proof of full water and energy independence before any municipal endorsement, which he noted expires Oct. 27, 2026. Senator Eliezer Molina pushed back that "no existe ahora mismo la capacidad de la demanda del agua" (there currently is no capacity to meet the water demand) from the regional Betances filtration plant, and senators questioned whether 1990s-era hydrogeological data remained reliable given a pending maritime-terrestrial boundary dispute still before DRNA's Examining Officers' Office. A companion Metro Puerto Rico report on the same hearing added further detail: environmental attorney Pedro Saádé Lloréns called the project's 2024 "strategic project" designation — which let its location consultation clear in 10 working days without public hearings — "abusive," while Sen. María de Lourdes Santiago said three of the developer's five test wells came back low-yield and were sealed, and that a backup desalination plan still lacks the required federal permits and environmental review. A separate NotiCel report on the hearing found Esencia's projected 76,264 lbs. of daily garbage has no confirmed disposal plan: Cabo Rojo's landfill lifespan would shrink under the added volume, Hormigueros' landfill is unavailable, and Peñuelas' closes by 2029, while developer Roberto Ruiz Vargas offered only that private operators would be used "if the municipality cannot handle it."

Roberto Ruiz Vargas, spokesperson for the Esencia project, testifies before the Puerto Rico Senate, Sept. 1, 2026
Roberto Ruiz Vargas, spokesperson for the Esencia project, testifies before the Puerto Rico Senate, Sept. 1, 2026 — Metro Puerto Rico