12 Commits

Author	SHA1	Message	Date
colin	b581cfa204	Optimize CSP configuration to improve deployment speed by removing hash calculation	2025-07-03 18:27:22 -04:00
colin	7845079307	Fix production site issues with a more permissive CSP policy	2025-07-03 18:15:49 -04:00
colin	767df7dc44	Fix production site issue by removing dynamic CSP function	2025-07-03 18:13:55 -04:00
colin	35f80738a7	Fix security headers for API routes to ensure compatibility with CURL interface	2025-07-03 18:08:09 -04:00
colin	26a36de4de	Optimize CSP by calculating resource hashes during Docker build	2025-07-03 14:36:17 -04:00
colin	9822bbd903	Expand Permissions-Policy to deny access to all unnecessary browser features	2025-07-03 14:31:02 -04:00
colin	0e76175163	Add missing security headers: Permissions-Policy, Cross-Origin-Embedder-Policy, Cross-Origin-Resource-Policy, and Cross-Origin-Opener-Policy	2025-07-03 14:26:35 -04:00
colin	f25ca7ffe0	Improve security by hosting all resources locally and using system fonts	2025-07-03 14:18:16 -04:00
colin	6a2dd63ad3	Fix CSP configuration to allow Bootstrap and external resources	2025-07-03 14:13:28 -04:00
colin	d771718799	Add environment variables for CSP configuration across different environments	2025-07-03 14:09:00 -04:00
colin	3ca04816eb	Add secure headers using flask-talisman	2025-07-03 14:03:18 -04:00
colin	61dda71a56	Initial commit with version 0.1.2	2025-07-03 13:44:14 -04:00