|
All checks were successful
Deploy Development / deploy (push) Successful in 36s
Test Suite / pytest-backend (push) Successful in 23s
Test Suite / lint-backend (push) Successful in 0s
Test Suite / build-frontend (push) Successful in 7s
Test Suite / playwright-tests (push) Successful in 23s
- Added Content-Security-Policy header to nginx configuration for SPA, enhancing security against XSS attacks. - Introduced middleware in FastAPI to set X-Content-Type-Options header, preventing MIME-sniffing vulnerabilities. - Updated production readiness audit and access layer endpoint audit to reflect security enhancements and ongoing governance practices. - Added tests to verify the presence of security headers in API responses, ensuring compliance with security standards. |
||
|---|---|---|
| .. | ||
| migrations | ||
| routers | ||
| scripts | ||
| tests | ||
| auth.py | ||
| club_tenancy.py | ||
| db_init.py | ||
| db.py | ||
| Dockerfile | ||
| main.py | ||
| models.py | ||
| pytest.ini | ||
| requirements-dev.txt | ||
| requirements.txt | ||
| run_migrations.py | ||
| smw_client.py | ||
| smw_mapper.py | ||
| tenant_context.py | ||
| version.py | ||