Commit Graph

4 Commits

Author SHA1 Message Date
posimai 57ed0d6fbe security(csp): unsafe-eval削除・connect-src絞り込み
unsafe-evalはAlpine.js不使用のため削除。
connect-srcにapi.open-meteo.comを明示追加(天気API使用)。

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-23 00:07:21 +09:00
posimai f1a6785eb0 fix(csp): style-src に posimai-ui.vercel.app を追加(base.css ブロック修正)
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-21 08:27:40 +09:00
posimai 3deee5a195 security: add CSP and HSTS headers to vercel.json 2026-04-20 17:10:32 +09:00
posimai 2570c36b9e feat(security): add vercel.json with security headers and sw.js cache control
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-17 19:01:16 +09:00