docs: address code review comments

- Fix test count in SECURITY_AUDIT.md (11 tests, not 24)
- Add deprecation note for ALLOW-FROM in X-Frame-Options
- Update documentation to recommend CSP frame-ancestors instead

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
This commit is contained in:
copilot-swe-agent[bot]
2026-02-10 14:10:23 +00:00
parent 68ee832e70
commit 20a0e43a11
3 changed files with 3 additions and 2 deletions
+1 -1
View File
@@ -727,7 +727,7 @@ All security headers are configurable via environment variables:
- `SECURITY_AUDIT.md` - Updated infrastructure security status
**Tests:**
- `tests/test_security_headers.py` - Comprehensive test suite (24 tests)
- `tests/test_security_headers.py` - Comprehensive test suite (11 tests)
- Unit tests for individual headers
- Integration tests for configuration loading
- Security tests for header format validation