LinYushen e20c507dcc fix(security): add Content-Security-Policy response header (#822) ...

Adds CSP middleware to the global middleware chain as a browser-level
defense against XSS: script-src 'self', object-src 'none',
frame-ancestors 'none', base-uri 'self', form-action 'self'.

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-13 12:53:39 +08:00

..

activity_listeners_test.go

…

activity_listeners.go

…

comment_trigger_integration_test.go

fix(server): don't inherit parent agent mentions when reply has its own mentions (#693)

2026-04-11 14:29:01 +08:00

integration_test.go

refactor: remove agent triggers config field (#469)

2026-04-07 22:02:28 +08:00

listeners.go

…

main.go

fix(server): add startup warnings for missing JWT_SECRET and RESEND_API_KEY

2026-04-10 15:17:53 +08:00

notification_listeners_test.go

…

notification_listeners.go

feat: notify parent issue subscribers on sub-issue changes (#685)

2026-04-11 14:33:00 +08:00

router.go

fix(security): add Content-Security-Policy response header (#822)

2026-04-13 12:53:39 +08:00

runtime_sweeper_test.go

fix(sweeper): reset in_progress issues to todo after stale task sweep (#747)

2026-04-12 14:08:54 +08:00

runtime_sweeper.go

fix(sweeper): add error logging and dedup for issue reset (#762)

2026-04-12 14:13:07 +08:00

subscriber_listeners_test.go

…

subscriber_listeners.go

…