posimai
3b99291f3e
fix: resolve CSP and service worker asset errors
...
Allow posimai-ui base script under CSP, permit unpkg source map fetches, and make SW precache resilient while adding the missing logo asset to prevent install/runtime errors.
Made-with: Cursor
2026-04-23 18:25:33 +09:00
posimai
bfa4ecb462
security(csp): unsafe-eval削除・connect-src絞り込み
...
unsafe-evalはAlpine.js不使用のため削除。
connect-srcをapi.soar-enrich.comのみに限定。
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-23 00:07:14 +09:00
posimai
867526a9ae
fix(csp): style-src に posimai-ui.vercel.app を追加（base.css ブロック修正）
...
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-21 08:27:07 +09:00
posimai
b8f85326ed
security: add CSP and HSTS headers to vercel.json
2026-04-20 17:09:21 +09:00
posimai
f778fa8127
feat(security): add vercel.json with security headers and sw.js cache control
...
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-17 19:00:53 +09:00
posimai