This release focuses on site reliability, safer browsing defaults, and a couple of small additions that help external tools understand and interact with the site.
New Capabilities
Health check endpoint: A lightweight health endpoint is now available that returns OK, making it easier to verify the site is up and responding.
Web app manifest support: The site now includes a web app manifest and links it in the header, helping browsers recognize the site as a web app.
LLM-friendly site description: Added an llms.txt file to provide a machine-readable description of the site.
Security Updates
Content Security Policy (CSP) and security headers: Added CSP and additional security headers to help protect visitors by default across web requests.
Compatibility adjustments: Updated CSP rules to allow Font Awesome styles, adblock checks, and Craft’s feed proxy connections to continue working as expected.