{# HTML5 requires within the first 1024 bytes; any operator-injected snippet must come AFTER charset + viewport. See base.html for the full rationale. #} {# Operator-injected scripts (placement=head_start). Mirrors base.html so login/auth pages surface custom_scripts too. #} {% for s in custom_scripts | default([]) if s.placement == 'head_start' %} {{ s.html | safe }} {% endfor %}