davide 0395a78008 fix(security): add HTTP security headers (CSP, HSTS, X-Frame-Options) ...

- middleware.ts: set X-Frame-Options, X-Content-Type-Options,
  Referrer-Policy, Permissions-Policy, Content-Security-Policy on all responses
- Caddyfile: add Strict-Transport-Security (HSTS 1y), X-Frame-Options,
  X-Content-Type-Options at reverse proxy level

2026-05-19 10:10:08 +02:00

..

app

fix(security): validate file uploads with magic bytes, remove SVG from favicon whitelist

2026-05-19 10:09:53 +02:00

components

feat: add favicon upload and footer customization to admin settings

2026-05-18 22:50:07 +02:00

lib

fix(security): validate file uploads with magic bytes, remove SVG from favicon whitelist

2026-05-19 10:09:53 +02:00

middleware.ts

fix(security): add HTTP security headers (CSP, HSTS, X-Frame-Options)

2026-05-19 10:10:08 +02:00