Harden scratch sites: force security headers, form-action 'self' and noindex over _worker.js output, add a scratch banner, bucket the per-IP cap by IPv6 /64, default claimed repos to private with the claim token in the URL fragment, purge Pages cache on hosting suspension, and document takedown lag and the PSL operator task.
18 files changed+379−19
Rendering diff…