project-nomad/admin/config
Claude 9de5b5aabb
security: enable CSRF, HSTS, and CSP in shield config
- Enable CSRF protection with XSRF cookie for Inertia.js/React SPA
- Enable HSTS with 180-day max-age and includeSubDomains
- Enable CSP with nonce-based script policy, unsafe-inline for Tailwind
  styles, and restrictive defaults for frames/objects
- Allow map tile sources in img-src for offline map support

https://claude.ai/code/session_01JFvpTYgm8GiE4vJ4cJKsFx
2026-03-24 09:26:46 +00:00
..
app.ts feat: initial commit 2025-06-29 15:51:08 -07:00
bodyparser.ts feat: initial commit 2025-06-29 15:51:08 -07:00
cors.ts feat: initial commit 2025-06-29 15:51:08 -07:00
database.ts feat: initial commit 2025-06-29 15:51:08 -07:00
hash.ts feat: initial commit 2025-06-29 15:51:08 -07:00
inertia.ts feat(AI Assistant): custom name option for AI Assistant 2026-03-04 20:05:14 -08:00
logger.ts feat: make Nomad fully composable 2026-03-20 11:46:10 -07:00
queue.ts feat: background job overhaul with bullmq 2025-12-06 23:59:01 -08:00
session.ts feat: initial commit 2025-06-29 15:51:08 -07:00
shield.ts security: enable CSRF, HSTS, and CSP in shield config 2026-03-24 09:26:46 +00:00
static.ts feat: background job overhaul with bullmq 2025-12-06 23:59:01 -08:00
transmit.ts fix(ui): reduce SSE reconnect churn and polling overhead on navigation 2026-03-20 11:46:10 -07:00
vite.ts feat: initial commit 2025-06-29 15:51:08 -07:00