Lobo_Corp/ToBePlayed-Frontend
Public Access
3
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
100 Commits 1 Branch 0 Tags
43968b3b7a7cb10d72e9af7b83ae21ec816c4cb0
Commit Graph
2 Commits
Author SHA1 Message Date
lobo 7d9cf907fc feat(security): enforce the Content Security Policy 
The report-only run showed no violation in production.
 2026-09-26 07:15:14 +02:00
lobo 6edb53162e feat(security): add a report-only CSP and security headers
Build, Test & Push Frontend / docker (push) Successful in 23s
Details
Build, Test & Push Frontend / quality-check (push) Successful in 14s
Details 
nginx.conf is now an nginx template, so connect-src takes
AUTH_HOST and API_HOST from the container env. The image
sets both to empty by default, so nginx still starts
without them. Report-only until production shows no
violation. Also nosniff, Referrer-Policy and
Permissions-Policy.
 2026-09-25 15:47:23 +02:00