managarten/apps
Till JS f5ee3aae20 feat(security): add unified CSP headers to all 17 web apps
Create @manacore/shared-utils/security-headers with setSecurityHeaders()
utility that sets standard security headers (CSP, X-Frame-Options,
X-Content-Type-Options, Referrer-Policy, Permissions-Policy).

CSP includes stats.mana.how (Umami) and glitchtip.mana.how by default.
Each app passes its own connectSrc origins (auth URL, backend URL, etc.).

Previously only Calendar and Storage had CSP headers - now all 17 web
apps have consistent security headers via the shared utility.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 18:53:40 +01:00
..
calendar feat(security): add unified CSP headers to all 17 web apps 2026-03-22 18:53:40 +01:00
chat feat(security): add unified CSP headers to all 17 web apps 2026-03-22 18:53:40 +01:00
clock feat(security): add unified CSP headers to all 17 web apps 2026-03-22 18:53:40 +01:00
contacts feat(security): add unified CSP headers to all 17 web apps 2026-03-22 18:53:40 +01:00
context refactor(pwa): replace custom service workers with Vite PWA plugin and centralize offline page 2026-03-22 18:16:43 +01:00
docs fix: replace all manacore.app URLs with mana.how 2026-03-22 18:40:37 +01:00
manacore feat(security): add unified CSP headers to all 17 web apps 2026-03-22 18:53:40 +01:00
manadeck feat(security): add unified CSP headers to all 17 web apps 2026-03-22 18:53:40 +01:00
matrix refactor(pwa): replace custom service workers with Vite PWA plugin and centralize offline page 2026-03-22 18:16:43 +01:00
mukke feat(security): add unified CSP headers to all 17 web apps 2026-03-22 18:53:40 +01:00
nutriphi feat(security): add unified CSP headers to all 17 web apps 2026-03-22 18:53:40 +01:00
photos feat(security): add unified CSP headers to all 17 web apps 2026-03-22 18:53:40 +01:00
picture feat(security): add unified CSP headers to all 17 web apps 2026-03-22 18:53:40 +01:00
planta feat(security): add unified CSP headers to all 17 web apps 2026-03-22 18:53:40 +01:00
presi feat(security): add unified CSP headers to all 17 web apps 2026-03-22 18:53:40 +01:00
questions feat(security): add unified CSP headers to all 17 web apps 2026-03-22 18:53:40 +01:00
skilltree feat(security): add unified CSP headers to all 17 web apps 2026-03-22 18:53:40 +01:00
storage feat(security): add unified CSP headers to all 17 web apps 2026-03-22 18:53:40 +01:00
todo feat(security): add unified CSP headers to all 17 web apps 2026-03-22 18:53:40 +01:00
traces feat(error-tracking): complete GlitchTip integration for all backends 2026-03-19 21:47:27 +01:00
zitare feat(security): add unified CSP headers to all 17 web apps 2026-03-22 18:53:40 +01:00