sneak 73fc21b6a8 test: assert HSTS, CSP, and Permissions-Policy headers ...

Failing test for the three security headers required before 1.0
(issue #91). Implementation follows in the next commit.

Model: opus-4-8

2026-09-21 18:16:20 +00:00

..

allowlist

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

config

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

database

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

encurl

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

globals

Consolidate appname to internal/globals as a constant (#34)

2026-03-20 07:04:54 +01:00

handlers

CSRF protection on the login and URL-generator forms (closes #93)

2026-09-21 19:26:18 +02:00

healthcheck

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

httpfetcher

test: cover redirect SSRF and semaphore release in httpfetcher (closes #78)

2026-09-21 19:59:26 +02:00

imageprocessor

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

imgcache

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

logger

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

magic

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

middleware

test: assert HSTS, CSP, and Permissions-Policy headers

2026-09-21 18:16:20 +00:00

seal

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

server

CSRF protection on the login and URL-generator forms (closes #93)

2026-09-21 19:26:18 +02:00

session

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

signature

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

static

Add static files and HTML templates for web UI

2026-01-08 07:38:09 -08:00

templates

CSRF protection on the login and URL-generator forms (closes #93)

2026-09-21 19:26:18 +02:00