Skip to content

feat(security): add CSP headers and SRI for docs assets#1

Open
devnWisdom wants to merge 1 commit into
mainfrom
feat/548-csp-headers
Open

feat(security): add CSP headers and SRI for docs assets#1
devnWisdom wants to merge 1 commit into
mainfrom
feat/548-csp-headers

Conversation

@devnWisdom

Copy link
Copy Markdown
Owner

Summary

  • add report-only CSP headers for app routes and API responses
  • wire nonce-based scripts for the docs page and add SRI for external assets
  • add regression tests for the CSP policy

Fixes JosephOnuh#548

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add Content Security Policy headers to all responses

1 participant