and extracts the following text as a script body — the dev server then fails its dependency scan with `Expected ";" but found "non"` from the words "non-allowlisted hosts", which breaks e2e. So, what this buys, so nobody reads more or less into it: blocks external `script src=` from non-allowlisted hosts blocks injected inline scripts — each one is pinned by hash blocks fetch/XHR/WebSocket exfiltration (connect-src allowlist) blocks form-action, base-uri, object-src vectors does not stop image-based exfiltration — img-src must allow https: because event media comes from arbitrary publishers' og:image The cost of hashing is that an inline script edited after the hashes are computed is silently refused by the browser. That is why the violation reporter below exists: report-uri/report-to are ignored in a meta element and Pages serves no CSP header, so violations are caught in-page and sent to PostHog instead (src/lib/csp-report.ts, #241). frame-ancestors is deliberately NOT in this string: it is ignored in a meta element and browsers log a warning about it on every page load. It lives in public/_headers instead, ready for a CDN in front of Pages. X-Frame-Options (set there too) is the clickjacking control that actually applies today. */ }
milestone

FAA Clears Additional Starship Reentry Trajectories Ahead of Flight 14

| SpaceX

The FAA published a Notice of Availability in the Federal Register on September 4, 2026 for its Final Tiered Environmental Assessment and Finding of No Significant Impact covering additional SpaceX Starship reentry contingency operations in the Pacific Ocean and an additional Starship landing trajectory back to Starbase. The finding — following a draft assessment released July 13 and a public comment period that closed August 3 with 37 comments received — clears a new Northern Pacific Contingency Landing Area and expands two previously evaluated zones, the Hawaii/Central Pacific Ocean Contingency Landing Area and the Southeast Pacific Contingency Landing Area, while removing the U.S. Exclusive Economic Zone from the action area to limit potential effects on marine ecosystems and cultural resources. The approval, which local Texas outlets reported the FAA had reached by September 3, modifies SpaceX's vehicle operator license to give Ship 41 backup splashdown options if the primary return-to-Starbase trajectory or catch-tower attempt cannot be used, and follows an August 31 FCC filing that set a September 15, 2026 target date for Starship's 14th flight test — SpaceX's first attempt to reach full orbital velocity. The decision is a regulatory milestone rather than a launch announcement and does not by itself set or confirm a new flight date.

📄 Read article
The FAA clears additional Starship reentry trajectories and Pacific contingency landing zones ahead of Flight 14 — Port Isabel-South Padre Press