Yes when CSP was new it may sometimes have been beneficial to add them (although most of the time it would cause breakage) but these days most web apps will be setting that header themselves in a way that is appropriate for the app.
rimu
On PieFed, that character is automatically converted to 'th'.
That's it, yes.
If we use the browser dev tools to look at the CSP header that the HTML page returns, we can see that piefed.social has a different one than kopitalk.net. Below is piefed.social's one:

It's probably cloudflare or nginx causing that.
trello.com, which I have been using for over 10 years, was unchangingly awesome for most of that time. Then Atlassian bought them and started chipping away at it and in the last 6 months it's gone to shit really badly. Can't even drag and drop cards between columns reliably, anymore.
So for me there are no services left that haven't enshitified.
If you want a more manageable way to deal with error reports, get a free account with sentry.io, create a project within sentry and then put the DSN from the project into the SENTRY_DSN environment variable.
As soon as federation starts there is all kinds of weird JSON that arrives from different software, so errors start happening. Most of them are not serious.
Are you following PeerTube channels? Afaik PeerTube is the one most likely to trigger the JSON-LD-based signature validation.
It's trying to do something with json-ld, which is only done for some types of activities, I think...
Yeah I'm not arguing with you on this just sharing information I found.
Yes, I see, lots of parallels there.
Apparently Trump is quite a fan of drone strikes too:
There have been 2,243 drone strikes in the first two years of the Trump presidency, compared with 1,878 in Mr Obama's eight years in office,
Do you care to name an incident, so we can compare?
Yes, although, Pixelfed did raise CA$ 138,588 in a kickstarter back in March 2025 so it's ok to raise the bar for that project, IMO.