Articles tagged as "Security"

While making some small design changes to my website today, I noticed Safari on macOS was rendering a PDF at a very small scale, rather than filling the entire Safari window, as it usually does. After some troubleshooting, I realized Safari was generating a content security policy error, indicating the PDF itself was violating my site’s content security policy by trying to use unsafe-inline as its style-src.

I’ve been doing some “spring cleaning” in AWS and GitHub related to yesterday’s post, and while I was digging around, I realized there was a way to update my blogging stack and finally move it off GitHub Pages and instead use an AWS S3 bucket behind CloudFront, just like all of of my other websites.

If, like me, you use AWS CloudFront as a CDN to host content stored in an S3 bucket, you might not necessarily want search engines to index that content. When researching a solution to this problem for myself, I found plenty of forum discussions and blog posts suggesting you can accomplish this with a simple robots.txt file stored at the root of your S3 bucket. Google’s robots.txt documentation warns against doing this, however: