Commit Graph

4 Commits

Author SHA1 Message Date
posimai fab90f9240 security(csp): unsafe-eval削除・connect-src絞り込み
unsafe-evalはAlpine.js不使用のため削除。
atlasはhealth check用に connect-src https: を維持。

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-23 00:07:03 +09:00
posimai 88d1f57c82 fix(csp): style-src に posimai-ui.vercel.app を追加(base.css ブロック修正)
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-21 08:26:29 +09:00
posimai 94153d9c72 security: add CSP and HSTS headers to vercel.json 2026-04-20 17:07:55 +09:00
posimai 214f3f5a61 feat(security): add vercel.json with security headers and sw.js cache control
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-17 19:00:53 +09:00