managarten/apps/skilltree/apps/web
Till JS f5ee3aae20 feat(security): add unified CSP headers to all 17 web apps
Create @manacore/shared-utils/security-headers with setSecurityHeaders()
utility that sets standard security headers (CSP, X-Frame-Options,
X-Content-Type-Options, Referrer-Policy, Permissions-Policy).

CSP includes stats.mana.how (Umami) and glitchtip.mana.how by default.
Each app passes its own connectSrc origins (auth URL, backend URL, etc.).

Previously only Calendar and Storage had CSP headers - now all 17 web
apps have consistent security headers via the shared utility.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 18:53:40 +01:00
..
src feat(security): add unified CSP headers to all 17 web apps 2026-03-22 18:53:40 +01:00
.env.production.example feat(skilltree): connect web app to backend API 2026-01-29 11:05:32 +00:00
Dockerfile feat(games): add whopixels hosting at whopxl.mana.how 2026-03-20 19:57:50 +01:00
package.json refactor(pwa): replace custom service workers with Vite PWA plugin and centralize offline page 2026-03-22 18:16:43 +01:00
svelte.config.js feat(skilltree): add SkillTree MVP - gamified skill tracking app 2026-01-28 20:32:05 +00:00
tsconfig.json feat(skilltree): add SkillTree MVP - gamified skill tracking app 2026-01-28 20:32:05 +00:00
vite.config.ts feat: show build date/time on login screen across all apps 2026-03-21 12:40:57 +01:00
vitest.config.ts test(skilltree): add comprehensive test suite for web and backend 2026-01-29 12:43:19 +01:00