Securing a Static Site
A static site on GitHub Pages doesn’t have much to attack: no logins, no forms, no cookies, no database. But “not much” isn’t nothing, so I went through the whole setup (the domain, the build pipeline and the browser side) and fixed what was worth fixing.