LinYushen e20c507dcc fix(security): add Content-Security-Policy response header (#822) ...

Adds CSP middleware to the global middleware chain as a browser-level
defense against XSS: script-src 'self', object-src 'none',
frame-ancestors 'none', base-uri 'self', form-action 'self'.

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-13 12:53:39 +08:00

..

migrate

…

multica

feat(cli): enhance version command with JSON output and build info (#740)

2026-04-12 02:18:08 +08:00

server

fix(security): add Content-Security-Policy response header (#822)

2026-04-13 12:53:39 +08:00