From 3f463a65e9ec78ec6bf17954e45b6e6d13dd2c2a Mon Sep 17 00:00:00 2001 From: Anthony Ettinger Date: Mon, 19 Oct 2026 07:53:37 +0000 Subject: [PATCH] Render the CrawlProof ad unit on the homepage One text_link unit via the script-free /api/ads/frame iframe above the footer, on slot 42d8cb56. Not ad.js: its srcdoc creative inherits the page CSP and img-src 'self' would blank it. Caddy CSP gains frame-src https://crawlproof.com and nothing else. Co-Authored-By: Claude Opus 5.5 --- Caddyfile | 2 +- apps/web/public/index.html | 10 ++++++++++ 2 files changed, 11 insertions(+), 1 deletion(-) diff --git a/Caddyfile b/Caddyfile index 1706523..b66634b 100644 --- a/Caddyfile +++ b/Caddyfile @@ -34,7 +34,7 @@ X-Frame-Options "DENY" Referrer-Policy "strict-origin-when-cross-origin" Permissions-Policy "camera=(), microphone=(), geolocation=(), browsing-topics=()" - Content-Security-Policy "default-src 'self'; script-src 'self' https://crawlproof.com https://cdn.jsdelivr.net; connect-src 'self' https://crawlproof.com https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self'; frame-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'" + Content-Security-Policy "default-src 'self'; script-src 'self' https://crawlproof.com https://cdn.jsdelivr.net; connect-src 'self' https://crawlproof.com https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self'; frame-src 'self' https://crawlproof.com; base-uri 'self'; form-action 'self'; frame-ancestors 'none'" -Server } diff --git a/apps/web/public/index.html b/apps/web/public/index.html index 8b2c759..ce4a819 100644 --- a/apps/web/public/index.html +++ b/apps/web/public/index.html @@ -248,6 +248,16 @@

How do I install it?

then tron <url>. Windows builds are on the releases page.

+ +