Fonts & Assets
The page file store: uploads, folders, fonts and the limits that apply.
The security headers on page files.
Page files are served from /<pageId>/files/<path> with a deliberately tight policy: nosniff, SAMEORIGIN framing, and a Content-Security-Policy allowing only same-origin images and media with inline styles — no scripts, no objects, no forms, no outbound loads.