Security

This site, audited by its own tools.

Header grade, CSP, SRI and supply-chain checks — scored by the same open-source tools published on this site. Grades show as target until CI is live.

Header grade

A+

Target · until CI is live

Mozilla Observatory

A+ · target ≥110

Lighthouse mobile

100 / 100 / 100 / 100 · target

Checks

CSP in use

default-src 'self'; script-src 'self' 'nonce-{n}' 'strict-dynamic'; style-src 'self' 'nonce-{n}'; img-src 'self' data: https://mrlouiswright.github.io; font-src 'self'; connect-src 'self'; frame-ancestors 'none'; base-uri 'none'; form-action 'self'; object-src 'none'; manifest-src 'self'; worker-src 'self'; upgrade-insecure-requests

Disclosure

Responsible disclosure

Please report security issues privately. Prefer encrypted email once a PGP key is published.

security.txt →

Contact: mailto:hello@louiswright.co.uk
Expires: 2027-10-17T00:00:00.000Z
Encryption: https://louiswright.co.uk/pgp.asc
Canonical: https://louiswright.co.uk/.well-known/security.txt
Policy: https://louiswright.co.uk/security
Preferred-Languages: en