H1K0 40c91cec55 fix(backend): add baseline security response headers ...

Set X-Content-Type-Options: nosniff (so served file bytes are not MIME
sniffed), X-Frame-Options: DENY, and Referrer-Policy: no-referrer on all
responses via middleware.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-10 14:13:56 +03:00

..

cmd/server

fix(backend): set HTTP server timeouts to mitigate Slowloris

2026-06-10 14:13:22 +03:00

internal

fix(backend): add baseline security response headers

2026-06-10 14:13:56 +03:00

migrations

fix(backend): bootstrap admin from env instead of seeding admin/admin

2026-06-10 14:01:48 +03:00

go.mod

feat(backend): add integration tests with testcontainers-go

2026-04-05 02:34:16 +03:00

go.sum

feat(backend): add integration tests with testcontainers-go

2026-04-05 02:34:16 +03:00