security

1. Jun 13, 2026 · LLM Workbench

   Shipping log: a stricter CSP, a calmer landing, and a demo with a sense of humor

   A few weeks of work, recapped—removing the last unsafe-eval from production, a fail-closed audit gate, and a landing page that finally feels like the product.

   • changelog
   • security
   • product

2. Jun 2, 2026 · LLM Workbench

   Hunting unsafe-eval: removing the last eval from a strict CSP

   Ajv compiled JSON-Schema validators in the browser with new Function, which forced 'unsafe-eval' into our production policy. Here's how we precompiled it away—and pinned it shut.

   • security
   • csp
   • ajv

Browse the full blog or subscribe to /feed.xml.