Sebb

This https://github.com/apache/age-website/blob/172751231fec0f1f658c5af092e5787f15d49a3c/src/templates/index-page.js#L59 should read: Apache AGE is a PostgreSQL extension that provides graph database functionality.

Thanks for stopping by to let us know something could be better! **PLEASE READ**: If you have a support contract with Google, please create an issue in the [support console](https://cloud.google.com/support/)...

home.apache.org was dropped as a user-accessible host some while ago. There are still some references in documentation that need to be amended: https://infra.apache.org/committers.html#machines - reference to home needs to be...

CSP tool should base changes on existing site settings as a default, not infra.projects.org

2

This would allow for cumulative changes, instead of having to start again. However it would also be useful to show differences from the standard, and to base changes on that,...

The CSP tool currently allows the user to provide anything in the URL field. It should only allow https: and perhaps some others such as data: Ideally 3rd party URLs...

The tool assumes that changes only involve adding a single URL to a selection of CSP header elements. However, there are occasions when different permissions are needed for different hosts....

Add explanation of CSP settings

2

The new CSP tool looks useful, but will users know what all the different options are for? It woulf be useful to add descriptions and/or links to documentation for them.

CSP Tool - some missing settings

1

Not all the possible CSP settings are present. For example: connect-src font-src object-src media-src child-src form-action There are some others

AIUI, the privacy policy only relates to page assets that are automatically downloaded, i.e. without any user intervention. If a link has to be clicked by the user, AFAIK that...