Amruth Pillai 9bde7d544f feat(server): add CSP report-only and framing headers to web responses ...

Add X-Frame-Options, X-Content-Type-Options, Referrer-Policy, and a report-only CSP to every HTML fallback response via a shared constant. Remove the unconditional Access-Control-Allow-Origin header from the same-origin uploads endpoint (CORP: same-site already covers it).

2026-07-08 15:50:13 +02:00

..

src

feat(server): add CSP report-only and framing headers to web responses

2026-07-08 15:50:13 +02:00

package.json

Add application tracker (#3220)

2026-07-05 23:44:04 +02:00

tsconfig.json

Squashed commit of the following:

2026-05-19 13:14:21 +02:00

tsdown.config.ts

Squashed commit of the following:

2026-05-19 13:14:21 +02:00

turbo.json

Squashed commit of the following:

2026-05-19 13:14:21 +02:00

vitest.config.ts

Squashed commit of the following:

2026-05-19 13:14:21 +02:00