feat: set default HSTS and CSP headers for direct-exposure deployments (#14)#20

Merged

mgoldsborough merged 2 commits into

mainfrom

fix/issue-14-default-hsts-csp

May 5, 2026

Commits on May 3, 2026

feat: set default HSTS and CSP headers for direct-exposure deployments (#14)
mgoldsborough
committed

Commits on May 5, 2026

test(security-headers): cover SKIP_DEFAULTS opt-out and route override
mgoldsborough
committed