No commit message

package.json

@@ -6,7 +6,7 @@
     "backup": "rsync -av --delete --progress [email protected]:kill-the-newsletter/data/ /Volumes/leafac--external-storage/Backups/kill-the-newsletter/"
   },
   "dependencies": {
-    "@radically-straightforward/production": "^1.0.12",
+    "@radically-straightforward/production": "^1.0.13",
     "crypto-random-string": "^5.0.0",
     "mailparser": "^3.7.1",
     "smtp-server": "^3.13.4"

source/index.mts

@@ -678,7 +678,14 @@ switch (commandLineArguments.values.type) {
           `,
         );
         if (entry === undefined) return;
-        response.setHeader("X-Robots-Tag", "none").end(entry.content);
+        response
+          .setHeader(
+            "Content-Security-Policy",
+            "default-src 'self'; img-src *; style-src 'self' 'unsafe-inline'; frame-src 'none'; object-src 'none'; form-action 'self'; frame-ancestors 'none'",
+          )
+          .setHeader("Cross-Origin-Embedder-Policy", "unsafe-none")
+          .setHeader("X-Robots-Tag", "none")
+          .end(entry.content);
       },
     });
     application.push({

source/index.test.mts

@@ -1,13 +1,17 @@
 import nodemailer from "nodemailer";
 
+process.env.NODE_TLS_REJECT_UNAUTHORIZED = "0";
+
 await nodemailer
   .createTransport({
     host: "localhost",
     port: 25,
   })
   .sendMail({
     from: `"Example of Sender" <[email protected]>`,
-    to: `"Example of Recipient" <qni66g9alnwozwsrbrgw@localhost>`,
+    to: `"Example of Recipient" <r5bsqg3w6gqrsv7m59f1@localhost>`,
     subject: "Example of a Newsletter Entry",
-    html: "<p>Hello <strong>World</strong></p>".repeat(2 ** 0 /*13*/),
+    html: "<p>Hello <strong>World</strong> <img src='https://interactive-examples.mdn.mozilla.net/media/cc0-images/grapefruit-slice-332-332.jpg'/></p>".repeat(
+      2 ** 0 /*13*/,
+    ),
   });