Skip to content

fix: improve security headers (HSTS, COOP, CORP)#67

Merged
davidangarita1 merged 1 commit intodevelopfrom
fix/improve-security-headers
Apr 23, 2026
Merged

fix: improve security headers (HSTS, COOP, CORP)#67
davidangarita1 merged 1 commit intodevelopfrom
fix/improve-security-headers

Conversation

@davidangarita1
Copy link
Copy Markdown
Collaborator

Summary

  • Added HSTS header to enforce HTTPS
  • Added Cross-Origin-Opener-Policy (COOP) for context isolation
  • Added Cross-Origin-Resource-Policy (CORP) to prevent cross-origin resource loading
  • Narrowed connect-src to specific Netlify domains instead of wildcard

@davidangarita1 davidangarita1 merged commit 7f1b01e into develop Apr 23, 2026
2 checks passed
@davidangarita1 davidangarita1 deleted the fix/improve-security-headers branch April 23, 2026 15:56
davidangarita1 added a commit that referenced this pull request Apr 23, 2026
* fix(data): remove 1 broken link(s) [2026-03-23] (#56)

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

* feat: add security-related meta tags to enhance HTML document security

* feat(security): add Content-Security-Policy header and enhance iframe sandboxing

* feat(security): enhance application security with CSP, HTTP headers, and iframe sandboxing

* feat(security): update changelog with security fixes and enhancements for dependencies

* chore: update version to 0.1.0 and dependencies

- Bump version from 0.0.0 to 0.1.0 in package.json
- Upgrade sass from 1.92.1 to 1.98.0
- Add overrides for undici and serialize-javascript in package.json and pnpm-lock.yaml
- Update dependencies in pnpm-lock.yaml to reflect new versions for sass, terser, and others
- Upgrade various packages including babel plugins and core-js-compat

* chore: update version from 0.1.0 to 1.9.0 in package.json

* feat: update resources.json with new entries and enhance existing tags

* feat: enhance user experience and optimize performance

* refactor: change parent categories

* feat: add new finance resources for cryptocurrency platforms

* docs: add new resources

* feat: add template.json for resource structure

* refactor: add indentation

* feat: add ReggaetonBeGone resource for music genre detection

* feat: add new security resources for communication and privacy

* feat: add new security resources for privacy and programming

* feat: add programming interview guide resource

* feat: add new educational resources for programming and finance

* feat: add new career and education resources for job seekers and AI learning

* feat: add My Abandonware resource for downloading abandoned video games

* feat: change id by uuid

* refactor: add indentation

* feat: add new AI tools resources for sprite generation and pixel art editing

* feat: add new AI and gaming tools resources

* feat: add new educational and entertainment resources

* feat: add new tools and education resources to the dataset

* feat: add new tools and education resources including LibreSprite and Google LLL

* feat: add new 3D modeling tools including Magic Poser and Drawcademy resources

* feat: add unique IDs to various resources in the dataset

* refactor: reorder resources

* docs: add agent skills

* feat: add new educational and service resources including CastaTutor, MST School, Ofertu, and Rent a Human

* feat: add new resources Alpha Coders and Darebee to the dataset

* docs: Add comprehensive web quality audit skills and scripts

- Introduced LCP optimization reference for improving Largest Contentful Paint metrics.
- Created performance optimization skill with detailed strategies for enhancing web performance.
- Added SEO optimization skill focusing on search engine visibility and structured data implementation.
- Developed web quality audit skill covering performance, accessibility, SEO, and best practices.
- Implemented analyze.sh script for automated HTML quality checks, including doctype, charset, viewport, and alt text validations.

* docs: Remove outdated skills: performance, seo, web-quality-audit, and agent-tdd

- Deleted performance optimization skill documentation and related content.
- Removed SEO optimization skill documentation and guidelines.
- Eliminated web quality audit skill documentation and associated scripts.
- Removed agent-tdd skill documentation focused on Test-Driven Development.

* fix(ci): improve broken-link detection algorithm for weekly-link-check

* refactor: remove commented-out code and improve script clarity

* fix(data): remove 2 broken link(s) [2026-04-20] (#66)

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

* add enhanced security headers (HSTS, COOP, CORP) (#67)

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant