Levi Neuwirth f11495ff9a Fix audit tooling/infra findings ... - embed.py: pin nomic's auto_map modeling repo via code_revision — revision= alone left nomic-bert-2048 unpinned under trust_remote_code (AUDIT §1.3; verified loadable with HF_HUB_OFFLINE=1). Catch BadZipFile/EOFError when loading the page cache so a half-written npz is discarded, not fatal (§4.2), and unlink the tmp file on a failed save (§4.1) - nginx: collapse the CSP to one physical line — nginx has no line continuation in quoted strings, so the old value embedded literal backslash+LF bytes, illegal in HTTP/2 (§8.1). Add the externals the site actually uses: KaTeX webfonts + onnxruntime wasm via jsdelivr, and the popup provider APIs popups.js documents (§8.2) - Makefile: pathspec-limit the auto-commit to content/ so pre-staged unrelated work is no longer swept into auto: commits (§8.3) Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>		2026-06-10 09:21:47 -04:00
..
archive.conf	Add link archive system: snapshots, backlinks, link-rot	2026-05-23 10:06:33 -04:00
popup-proxy.conf	major visual changes - dingbats, footer, etc	2026-04-17 12:48:22 -04:00
security-headers.conf	Fix audit tooling/infra findings	2026-06-10 09:21:47 -04:00
static-assets.conf	nginx: ship security baseline, reference vhost, and tighter cache	2026-05-07 15:08:03 -04:00
vhost.conf.example	Add link archive system: snapshots, backlinks, link-rot	2026-05-23 10:06:33 -04:00