Merge pull request #504 from jackseceng/readme-update

docs(readme): update instructions for purging R2 cache for integrity …

Author: jackseceng

app/templates/index.html

@@ -125,6 +125,7 @@ <h1>Shorten a link</h1>
       <a href="https://jacksec.engineer" target="_blank"> Made by Jack </a>
     </div>
     <script src="https://{{ cdn }}/main.js" integrity="sha384-+mgxv/j8PS4LqfbANhG2Iy3ZROxiOMvFDK5SAzv2RzFAl/VXX4baZgpmUVEENxS/" crossorigin="anonymous"></script>
+    <!-- nosemgrep: missing-integrity - SRI cannot be applied to this third-party Cloudflare Turnstile script as the file contents are managed and updated by Cloudflare. Adding an integrity hash would break the captcha whenever Cloudflare updates the script. -->
     <script
       src="https://challenges.cloudflare.com/turnstile/v0/api.js"
       async

readme.md

@@ -141,6 +141,9 @@ for f in app/static/*; do echo "$(basename $f): sha384-$(openssl dgst -sha384 -b
 ```
 
 > [!IMPORTANT]
-> If you upload modified static files to your dev R2 bucket without updating the `integrity` attributes in the HTML templates, the browser will block those resources from loading. After updating the `integrity` attributes in the templates, you must rebuild the container with `docker compose up -d --build` for the changes to take effect.
+> If you upload modified static files to your dev R2 bucket without updating the `integrity` attributes in the HTML templates, the browser will block those resources from loading.
+> After updating the `integrity` attributes in the templates, you must rebuild the container with `docker compose up -d --build` for the changes to take effect.
+> In production, you must also purge the Cloudflare cache for any updated files, otherwise the CDN will continue serving the old version.
+> This can be done in the Cloudflare dashboard under Caching > Configuration > Custom Purge, entering the full URL of each updated file.
 
 ## Developed by [Jack](https://jacksec.engineer)