and extracts the following text as a script body — the dev server then fails its dependency scan with `Expected ";" but found "non"` from the words "non-allowlisted hosts", which breaks e2e. So, what this buys, so nobody reads more or less into it: blocks external `script src=` from non-allowlisted hosts blocks injected inline scripts — each one is pinned by hash blocks fetch/XHR/WebSocket exfiltration (connect-src allowlist) blocks form-action, base-uri, object-src vectors does not stop image-based exfiltration — img-src must allow https: because event media comes from arbitrary publishers' og:image The cost of hashing is that an inline script edited after the hashes are computed is silently refused by the browser. That is why the violation reporter below exists: report-uri/report-to are ignored in a meta element and Pages serves no CSP header, so violations are caught in-page and sent to PostHog instead (src/lib/csp-report.ts, #241). frame-ancestors is deliberately NOT in this string: it is ignored in a meta element and browsers log a warning about it on every page load. It lives in public/_headers instead, ready for a CDN in front of Pages. X-Frame-Options (set there too) is the clickjacking control that actually applies today. */ }
milestone

SpaceX Tells FCC Starship Flight 14 Will Attempt First Full Orbital Insertion, Targets Sept 15

| SpaceX

SpaceX filed an application with the FCC on August 31, 2026 requesting a Special Temporary Authorization for its Starlink V3 satellites to operate in the 42.0-42.5 GHz space-to-Earth band, stating that September 15, 2026 is the planned launch/deployment date for Starship's 14th integrated flight test (Booster 21 + Ship 41). The filing is the first to put a full orbital-insertion mission profile on Starship's communications paperwork — unlike the suborbital arcs flown on every prior test, Flight 14 is designed to reach and hold actual orbital velocity, deploying roughly 20 operational Starlink V3 satellites (each rated around 1 terabit per second of downlink capacity) rather than dummy payloads. The target date matches what Elon Musk told investors on SpaceX's August 4 earnings call, that the next flight would carry next-generation V3 satellites into an operational orbit. The FCC filing covers communications authority only, not flight readiness; SpaceX still needs Ship 41 fully stacked atop Booster 21 and cleared by the FAA before the flight can proceed, and Musk has separately said a tower-catch attempt of the upper stage is still probably a few months away rather than planned for Flight 14, with the ship instead targeting an Indian Ocean splashdown.

📄 Read article
SpaceX's FCC filing confirms Starship Flight 14 will attempt full orbital insertion, targeting September 15, 2026 — Teslarati