Skip to content

feat: attach standard security headers to all API responses#378

Merged
1nonlypiece merged 2 commits into
Commitlabs-Org:masterfrom
MissBlue00:issue-251
Apr 26, 2026
Merged

feat: attach standard security headers to all API responses#378
1nonlypiece merged 2 commits into
Commitlabs-Org:masterfrom
MissBlue00:issue-251

Conversation

@MissBlue00
Copy link
Copy Markdown

  • Add security headers (CSP, X-Content-Type-Options, X-Frame-Options, X-XSS-Protection, Referrer-Policy) to ok() and fail() helpers in apiResponse.ts
  • Update health and ready routes to use ok() helper for consistent response format
  • Add tests verifying headers exist on API responses

Closes #251

- Add security headers (CSP, X-Content-Type-Options, X-Frame-Options, X-XSS-Protection, Referrer-Policy) to ok() and fail() helpers in apiResponse.ts
- Update health and ready routes to use ok() helper for consistent response format
- Add tests verifying headers exist on API responses

Closes Commitlabs-Org#251
@vercel
Copy link
Copy Markdown

vercel Bot commented Apr 24, 2026

Someone is attempting to deploy a commit to the 1nonly's projects Team on Vercel.

A member of the Team first needs to authorize it.

@drips-wave
Copy link
Copy Markdown

drips-wave Bot commented Apr 24, 2026

@MissBlue00 Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits

@1nonlypiece 1nonlypiece merged commit 3dc7749 into Commitlabs-Org:master Apr 26, 2026
0 of 2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Backend - Enforce standard security headers on all API JSON responses

2 participants