docs: sentence-case sweep across 10 more pages

- tools/plugin: Package Entrypoints
- tools/code-execution: How To Use It
- tools/browser-linux-troubleshooting: Root Cause, Config Reference
- install/bun: Lifecycle Scripts
- nodes/audio: Mention Detection in Groups
- nodes/images: Inbound Media to Commands (Pi)
- platforms/android: Connection Runbook
- plugins/building-plugins: Beta Release Testing
- web/control-ui: Content Security Policy
- security/THREAT-MODEL-ATLAS: Framework Attribution
This commit is contained in:
Vincent Koc
2026-04-27 00:03:01 -07:00
parent 9d33da6ddf
commit baace37fef
10 changed files with 11 additions and 11 deletions

View File

@@ -321,7 +321,7 @@ Documented exceptions:
See [Tailscale](/gateway/tailscale) for HTTPS setup guidance.
## Content Security Policy
## Content security policy
The Control UI ships with a tight `img-src` policy: only **same-origin** assets, `data:` URLs, and locally generated `blob:` URLs are allowed. Remote `http(s)` and protocol-relative image URLs are rejected by the browser and do not issue network fetches.