26 Commits

All Branches

Search

Author	SHA1	Message	Date
colin	5dc4eea2a6	Add keyboard shortcuts for improved user experience	2025-07-04 22:34:50 -04:00
colin	679c51263d	Add transaction approval system	2025-07-04 22:26:20 -04:00
colin	a64ac45046	Add API endpoints and prev/next navigation for transactions	2025-07-04 20:09:47 -04:00
colin	c85092e0fe	perfect lighthouse score	2025-07-04 16:21:37 -04:00
colin	799da3d134	feat: Improve accessibility and update theme	2025-07-04 16:04:36 -04:00
colin	6e462f3a43	Add official Project Ploughshares logo and favicon with updated styling	2025-07-04 15:01:36 -04:00
colin	483f8f3760	Add form suggestions for provinces, transaction types, grant types, and commodity classes	2025-07-04 10:39:15 -04:00
colin	8c336ebf81	Fix button icons by adding Bootstrap Icons CSS and updating CSP to allow CDN resources	2025-07-03 19:13:56 -04:00
colin	966f97737b	Fix UI rendering by setting Cross-Origin-Embedder-Policy to unsafe-none for UI routes	2025-07-03 18:34:48 -04:00
colin	e7dbb1605b	Fix CORS headers for API endpoints to support all common headers and client types	2025-07-03 18:31:20 -04:00
colin	b581cfa204	Optimize CSP configuration to improve deployment speed by removing hash calculation	2025-07-03 18:27:22 -04:00
colin	b950dd2c2a	Add header testing scripts for debugging API and security headers	2025-07-03 18:24:12 -04:00
colin	7845079307	Fix production site issues with a more permissive CSP policy	2025-07-03 18:15:49 -04:00
colin	767df7dc44	Fix production site issue by removing dynamic CSP function	2025-07-03 18:13:55 -04:00
colin	35f80738a7	Fix security headers for API routes to ensure compatibility with CURL interface	2025-07-03 18:08:09 -04:00
colin	26a36de4de	Optimize CSP by calculating resource hashes during Docker build	2025-07-03 14:36:17 -04:00
colin	9822bbd903	Expand Permissions-Policy to deny access to all unnecessary browser features	2025-07-03 14:31:02 -04:00
colin	0e76175163	Add missing security headers: Permissions-Policy, Cross-Origin-Embedder-Policy, Cross-Origin-Resource-Policy, and Cross-Origin-Opener-Policy	2025-07-03 14:26:35 -04:00
colin	f25ca7ffe0	Improve security by hosting all resources locally and using system fonts	2025-07-03 14:18:16 -04:00
colin	6a2dd63ad3	Fix CSP configuration to allow Bootstrap and external resources	2025-07-03 14:13:28 -04:00
colin	d771718799	Add environment variables for CSP configuration across different environments	2025-07-03 14:09:00 -04:00
colin	3ca04816eb	Add secure headers using flask-talisman	2025-07-03 14:03:18 -04:00
colin	ae66bf0193	Remove outdated scan result files	2025-07-03 13:53:28 -04:00
colin	5d87d8e9f3	we havent licensed this.	2025-07-03 13:51:59 -04:00
colin	3c1661c1a7	Clean up README.md to remove inaccurate information	2025-07-03 13:49:17 -04:00
colin	61dda71a56	Initial commit with version 0.1.2	2025-07-03 13:44:14 -04:00