Lars 161d520329 feat: implement CSP and security headers for API responses ... - Added Content-Security-Policy header to nginx configuration for SPA, enhancing security against XSS attacks. - Introduced middleware in FastAPI to set X-Content-Type-Options header, preventing MIME-sniffing vulnerabilities. - Updated production readiness audit and access layer endpoint audit to reflect security enhancements and ongoing governance practices. - Added tests to verify the presence of security headers in API responses, ensuring compliance with security standards.		2026-05-07 11:09:06 +02:00
..
test_access_layer_integration.py	feat: update application version to 0.8.35 and enhance profile access controls	2026-05-05 22:57:42 +02:00
test_access_layer.py	feat: update access layer governance and visibility checks	2026-05-05 22:11:05 +02:00
test_exercise_media_download.py	feat: enhance media access and security for exercises	2026-05-07 10:52:14 +02:00
test_exercises_delete_policy.py	feat: enhance exercise management features and UI	2026-05-06 13:52:24 +02:00
test_profiles_read_access.py	feat: update application version to 0.8.36 and enhance profile creation process	2026-05-05 23:01:14 +02:00
test_security_release.py	feat: implement CSP and security headers for API responses	2026-05-07 11:09:06 +02:00
test_training_unit_assignments.py	feat: update application version to 0.8.37 and enhance training planning features	2026-05-05 23:35:41 +02:00