feat: Add Content Security Policy, enhance author information display with TypeIt animation, and include an RSS social link.
All checks were successful
Hugo Publish CI / build-and-deploy (push) Successful in 22s

This commit is contained in:
2025-12-20 10:59:32 -08:00
parent f374adac0c
commit 5b0d9a761d
3 changed files with 75 additions and 1 deletions

View File

@@ -12,6 +12,12 @@ enableTwemoji = true
enableGitInfo = true
enableRobotsTXT = true
[taxonomies]
category = "categories"
series = "series"
tag = "tags"
author = "authors"
# Disqus comments configuration
[services]
[services.disqus]
@@ -85,7 +91,7 @@ style = "github-dark"
[params] # theme parameters
author = "Eric X. Liu"
info = "Software & Performance Engineer @Google"
info = ["Software & Performance Engineer @Google", "Open Source Contributor", "Tech Enthusiast"]
description = "Eric X. Liu - Software & Performance Engineer at Google. Sharing insights about software engineering, performance optimization, tech industry experiences, mountain biking adventures, Jeep overlanding, and outdoor activities."
keywords = "software engineer, performance engineering, Google engineer, tech blog, software development, performance optimization, Eric Liu, engineering blog, mountain biking, Jeep enthusiast, overlanding, camping, outdoor adventures"
avatarurl = "images/gravatar.png"
@@ -143,6 +149,33 @@ style = "github-dark"
filename = "sitemap.xml"
priority = 0.5
# If you want to implement a Content-Security-Policy, add this section
[params.csp]
childsrc = ["'self'"]
fontsrc = ["'self'", "https://fonts.gstatic.com", "https://cdn.jsdelivr.net/"]
formaction = ["'self'"]
framesrc = ["'self'", "https://www.youtube.com"]
imgsrc = ["'self'"]
objectsrc = ["'none'"]
stylesrc = [
"'self'",
"'unsafe-inline'",
"https://fonts.googleapis.com/",
"https://cdn.jsdelivr.net/",
]
scriptsrc = [
"'self'",
"'unsafe-inline'",
"https://www.google-analytics.com",
"https://cdn.jsdelivr.net/",
"https://pagead2.googlesyndication.com",
"https://static.cloudflareinsights.com",
"https://unpkg.com",
]
prefetchsrc = ["'self'"]
# connect-src directive defines valid targets for to XMLHttpRequest (AJAX), WebSockets or EventSource
connectsrc = ["'self'", "https://www.google-analytics.com", "https://pagead2.googlesyndication.com", "https://cloudflareinsights.com", "ws://localhost:1313", "ws://localhost:*", "wss://localhost:*"]
# Social links
[[params.social]]
name = "Git"
@@ -158,6 +191,13 @@ style = "github-dark"
name = "Personal email"
icon = "fa fa-envelope fa-2x"
weight = 3
[[params.social]]
name = "RSS"
icon = "fa-solid fa-rss fa-2x"
weight = 6
url = "https://ericxliu.me/index.xml"
rel = "alternate"
type = "application/rss+xml"
# Menu links
[languages]