Writing

Notes from the workbench

How I build the projects, and what the data turns up along the way.

• A live now-playing widget under a strict CSPHow the little 'currently listening' card on this site stays live without ever leaking a Spotify token — and why a nonce-based Content-Security-Policy made it interesting.June 20, 20262 min