managarten/apps/contacts
Till JS f5ee3aae20 feat(security): add unified CSP headers to all 17 web apps
Create @manacore/shared-utils/security-headers with setSecurityHeaders()
utility that sets standard security headers (CSP, X-Frame-Options,
X-Content-Type-Options, Referrer-Policy, Permissions-Policy).

CSP includes stats.mana.how (Umami) and glitchtip.mana.how by default.
Each app passes its own connectSrc origins (auth URL, backend URL, etc.).

Previously only Calendar and Storage had CSP headers - now all 17 web
apps have consistent security headers via the shared utility.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 18:53:40 +01:00
..
apps feat(security): add unified CSP headers to all 17 web apps 2026-03-22 18:53:40 +01:00
docs ♻️ refactor(contacts): remove statistics, network view and session storage; implement demo mode 2026-01-28 14:12:19 +01:00
CLAUDE.md feat: major update with network graphs, themes, todo extensions, and more 2025-12-10 02:37:46 +01:00
package.json 🔧 chore: enforce monorepo best practices with automated validation 2025-12-25 17:57:00 +01:00