b03ebab747
chore: apply ruff formatting and fix whitespace issues
...
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-02-13 09:12:11 +00:00
43bc58770d
refactor: consolidate linting tools into Ruff
...
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-02-13 09:10:52 +00:00
20a0e43a11
docs: address code review comments
...
- Fix test count in SECURITY_AUDIT.md (11 tests, not 24)
- Add deprecation note for ALLOW-FROM in X-Frame-Options
- Update documentation to recommend CSP frame-ancestors instead
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-02-10 14:10:23 +00:00
68ee832e70
style: format code with Black
...
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-02-10 14:08:24 +00:00
e144fdd50a
feat(security): add configurable security headers middleware
...
- Add SecurityHeadersMiddleware with HSTS, CSP, X-Frame-Options, X-Content-Type-Options
- Add configuration options in app/config.py
- Integrate middleware into app/main.py
- Add comprehensive tests in tests/test_security_headers.py
- Update .env.demo with security header examples
- Update docs/DeploymentGuide.md with security headers section and Traefik/Nginx examples
- Update docs/ConfigurationGuide.md with detailed configuration reference
- Update SECURITY_AUDIT.md to mark security headers implementation complete
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-02-10 14:05:19 +00:00
copilot-swe-agent[bot]