A practical security-headers checklist for marketing sites
Replace this with a real article before launch. Each post in this folder becomes a page automatically — add a new .md file here with the same front matter shape and it appears on the Resources page without touching any template.
What to check
- Content-Security-Policy without
unsafe-inline - Strict-Transport-Security once HTTPS is confirmed stable
- X-Content-Type-Options: nosniff
- Referrer-Policy
- Permissions-Policy
Run the published site through SecurityHeaders.com and Mozilla Observatory before publishing this as a real post.