2 commits

Author	SHA1	Message	Date
senke	0366b87d94	[BE-SEC-011] be-sec: Implement security headers ... - Enhanced security headers middleware with additional headers - Added X-Permitted-Cross-Domain-Policies: none - Added Cross-Origin-Embedder-Policy: require-corp - Added Cross-Origin-Opener-Policy: same-origin - Added Cross-Origin-Resource-Policy: same-origin - Enhanced Permissions-Policy with additional restrictions - Enhanced CSP with frame-ancestors directive - HSTS now only set in production (not in development) - Updated tests to verify all new headers	2025-12-24 12:24:54 +01:00
senke	2dfde29f7d	refonte: backend-api go first; phase 1	2025-12-12 21:34:34 -05:00