<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>domidex — Blog</title>
    <link>https://domidex.dev/blog/</link>
    <description>Portfolio of Dominique Degottex, a fullstack developer shipping products end to end, now transitioning into security. Open-source tooling, Astro themes and product tours.</description>
    <language>en-US</language>
    <atom:link href="https://domidex.dev/rss.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>Security headers for a static site: the short list</title>
      <link>https://domidex.dev/blog/security-headers-for-a-static-site/</link>
      <guid isPermaLink="true">https://domidex.dev/blog/security-headers-for-a-static-site/</guid>
      <description>A static site has no server code to exploit, but its HTTP headers still decide how a browser treats it. The six I set on every deploy, what each one stops, and how to check them.</description>
      <pubDate>Wed, 07 Oct 2026 00:00:00 GMT</pubDate>
    </item>
  </channel>
</rss>
