Commit Graph

2 Commits

Author SHA1 Message Date
Claude
9de5b5aabb
security: enable CSRF, HSTS, and CSP in shield config
- Enable CSRF protection with XSRF cookie for Inertia.js/React SPA
- Enable HSTS with 180-day max-age and includeSubDomains
- Enable CSP with nonce-based script policy, unsafe-inline for Tailwind
  styles, and restrictive defaults for frames/objects
- Allow map tile sources in img-src for offline map support

https://claude.ai/code/session_01JFvpTYgm8GiE4vJ4cJKsFx
2026-03-24 09:26:46 +00:00
Jake Turner
b33a1b3e37 feat: initial commit 2025-06-29 15:51:08 -07:00