Amruth Pillai 9bde7d544f feat(server): add CSP report-only and framing headers to web responses ...

Add X-Frame-Options, X-Content-Type-Options, Referrer-Policy, and a report-only CSP to every HTML fallback response via a shared constant. Remove the unconditional Access-Control-Allow-Origin header from the same-origin uploads endpoint (CORP: same-site already covers it).

2026-07-08 15:50:13 +02:00

..

server

feat(server): add CSP report-only and framing headers to web responses

2026-07-08 15:50:13 +02:00

web

[skip ci] chore(i18n): sync translations from crowdin (#3233)

2026-07-07 18:21:35 +02:00