From 84316f86ba41dde3cc5166e1cf28cc498e101daf Mon Sep 17 00:00:00 2001
From: Paul Duncan <pabs@pablotron.org>
Date: Fri, 25 Feb 2022 03:47:29 -0500
Subject: add posts/2022-02-25-relaxed-csp-for-go-coverage.md

---
 TODO.md | 24 +++++++++++++-----------
 1 file changed, 13 insertions(+), 11 deletions(-)

(limited to 'TODO.md')

diff --git a/TODO.md b/TODO.md
index 0953d3d..d6a6680 100644
--- a/TODO.md
+++ b/TODO.md
@@ -117,17 +117,9 @@ this stuff may not make any sense.
   - trigger `REFERENCING ... AS` (newer PG)
   - `COMMENT ON` ...
   - `LISTEN/NOTIFY`?
-* CSP-friendly golang coverage reports (see note from k3-notes.txt about
-  relaxing CSP for `pmdn.org/coverage/`)
-  - https://cs.opensource.google/go/go/+/master:src/cmd/cover/html.go
-  - "replace `style='display: none` with `.hide` (shrink html, improve
-    CSP handling)"
-  - "add sha256 hash for `<style>`"
-  - "add sha256 hash for `<script>`"
-  - "add `<meta http-equiv='content-security-policy' ...>`?"
-  - other:
-    - add `title` and maybe `aria-label` attributes to relevant elements
-    - add option to include external stylesheet?
+- misc go cover improvements
+  - add `title` and maybe `aria-label` attributes to relevant elements
+  - add option to include external stylesheet?
 * compare and contrast cyclonedx vs spdx
   - (at the moment i like cyclonedx more, it seems less ad-hoc)
   - https://cyclonedx.org/docs/1.4/json/
@@ -135,6 +127,8 @@ this stuff may not make any sense.
   - go parsers for both are available:
     - https://github.com/spdx/tools-golang
     - https://github.com/CycloneDX/cyclonedx-go
+* investigate sendBeacon()
+  https://developer.mozilla.org/en-US/docs/Web/API/Navigator/sendBeacon
 
 ## done
 * add project folders
@@ -166,3 +160,11 @@ this stuff may not make any sense.
   (created repo: https://github.com/pablotron/tiny-binaries)
 * rust 1.59.9 stripped binaries (update)
   - https://blog.rust-lang.org/2022/02/24/Rust-1.59.0.html#creating-stripped-binaries
+* CSP-friendly golang coverage reports (see note from k3-notes.txt about
+  relaxing CSP for `pmdn.org/coverage/`)
+  - https://cs.opensource.google/go/go/+/master:src/cmd/cover/html.go
+  - "replace `style='display: none` with `.hide` (shrink html, improve
+    CSP handling)"
+  - "add sha256 hash for `<style>`"
+  - "add sha256 hash for `<script>`"
+  - "add `<meta http-equiv='content-security-policy' ...>`?"
-- 
cgit v1.2.3