gitea-admin/gh-christianlouis-docuelevate
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
629 Commits 28 Branches 0 Tags
604facf36f72e7a8acf3429f7d68c4f3bfc81068
Commit Graph

3 Commits

Author SHA1 Message Date
copilot-swe-agent[bot] 20a0e43a11 docs: address code review comments 
- Fix test count in SECURITY_AUDIT.md (11 tests, not 24)
- Add deprecation note for ALLOW-FROM in X-Frame-Options
- Update documentation to recommend CSP frame-ancestors instead

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-02-10 14:10:23 +00:00
copilot-swe-agent[bot] 68ee832e70 style: format code with Black 
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-02-10 14:08:24 +00:00
copilot-swe-agent[bot] e144fdd50a feat(security): add configurable security headers middleware 
- Add SecurityHeadersMiddleware with HSTS, CSP, X-Frame-Options, X-Content-Type-Options
- Add configuration options in app/config.py
- Integrate middleware into app/main.py
- Add comprehensive tests in tests/test_security_headers.py
- Update .env.demo with security header examples
- Update docs/DeploymentGuide.md with security headers section and Traefik/Nginx examples
- Update docs/ConfigurationGuide.md with detailed configuration reference
- Update SECURITY_AUDIT.md to mark security headers implementation complete

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-02-10 14:05:19 +00:00