privacy pass: degoogle, CSP, referrer

- Replace Google Fonts with system font stacks across all themes
- Add Referrer-Policy, X-Content-Type-Options, X-Frame-Options, CSP headers
- Add rel="noreferrer noopener" on all outbound links
- Add no-referrer and dns-prefetch-control meta tags to all themes
- Clean tracking params on outbound links from trusted/remote sources
- Remove Google domains from CSP whitelists
This commit is contained in:
blankie 2026-04-08 10:11:57 -07:00
parent b2db40f3d3
commit af3bbc33fd
6 changed files with 285 additions and 275 deletions

View file

@ -3,15 +3,16 @@
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<meta name="referrer" content="no-referrer">
<meta http-equiv="x-dns-prefetch-control" content="off">
<style>
@import url('https://fonts.googleapis.com/css2?family=Nunito:ital,wght@0,400;0,600;0,700;1,400&family=Fira+Code:wght@400;500&display=swap');
* { margin: 0; padding: 0; box-sizing: border-box; }
html, body { min-height: 100vh; }
body {
font-family: 'Nunito', -apple-system, sans-serif;
font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', 'Noto Sans', Helvetica, Arial, sans-serif;
font-size: 16px;
line-height: 1.65;
color: #e0d8c8;
@ -81,7 +82,7 @@
right: 10px;
z-index: 900;
pointer-events: none;
font-family: 'Fira Code', monospace;
font-family: ui-monospace, 'SF Mono', 'Cascadia Code', 'Segoe UI Mono', Menlo, Consolas, monospace;
display: flex;
flex-direction: column;
align-items: flex-end;
@ -289,7 +290,7 @@
}
nav .site {
font-family: 'Fira Code', monospace;
font-family: ui-monospace, 'SF Mono', 'Cascadia Code', 'Segoe UI Mono', Menlo, Consolas, monospace;
font-size: 0.85rem;
font-weight: 500;
color: #f0d878;
@ -383,7 +384,7 @@
border-radius: 4px;
padding: 0.6rem 0.85rem;
color: #d0c8b8;
font-family: 'Nunito', sans-serif;
font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', 'Noto Sans', Helvetica, Arial, sans-serif;
font-size: 0.95rem;
transition: border-color 0.2s, box-shadow 0.3s;
}
@ -400,7 +401,7 @@
border-radius: 4px;
padding: 0.6rem 1.1rem;
color: #a098b0;
font-family: 'Nunito', sans-serif;
font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', 'Noto Sans', Helvetica, Arial, sans-serif;
font-size: 0.88rem;
transition: all 0.2s;
}
@ -443,7 +444,7 @@
.tags { margin-top: 0.3rem; }
.tag, .tags a {
font-family: 'Fira Code', monospace;
font-family: ui-monospace, 'SF Mono', 'Cascadia Code', 'Segoe UI Mono', Menlo, Consolas, monospace;
font-size: 0.7rem;
color: #8878a0;
border: 1px solid rgba(255,255,255,0.08);
@ -486,7 +487,7 @@
/* code */
pre {
font-family: 'Fira Code', monospace;
font-family: ui-monospace, 'SF Mono', 'Cascadia Code', 'Segoe UI Mono', Menlo, Consolas, monospace;
font-size: 0.8rem;
background: rgba(15, 10, 40, 0.5);
border: 1px solid rgba(255,255,255,0.08);
@ -498,7 +499,7 @@
}
code {
font-family: 'Fira Code', monospace;
font-family: ui-monospace, 'SF Mono', 'Cascadia Code', 'Segoe UI Mono', Menlo, Consolas, monospace;
font-size: 0.82rem;
background: rgba(15, 10, 40, 0.4);
border-radius: 3px;
@ -513,7 +514,7 @@
border-radius: 4px;
padding: 0.7rem 0.9rem;
color: #d0c8b8;
font-family: 'Fira Code', monospace;
font-family: ui-monospace, 'SF Mono', 'Cascadia Code', 'Segoe UI Mono', Menlo, Consolas, monospace;
font-size: 0.8rem;
line-height: 1.6;
resize: vertical;
@ -547,7 +548,7 @@
hr { border: none; border-top: 1px solid rgba(255,255,255,0.06); margin: 1rem 0; }
small {
font-family: 'Fira Code', monospace;
font-family: ui-monospace, 'SF Mono', 'Cascadia Code', 'Segoe UI Mono', Menlo, Consolas, monospace;
font-size: 0.7rem;
color: #5a5070;
}
@ -562,7 +563,7 @@
}
footer .clock {
font-family: 'Fira Code', monospace;
font-family: ui-monospace, 'SF Mono', 'Cascadia Code', 'Segoe UI Mono', Menlo, Consolas, monospace;
font-size: 0.72rem;
color: #3a3050;
margin-top: 0.25rem;