Flight Log / tomacheese/tomacheese.com #835
feat: implement Content Security Policy and security headers — a GitHub Copilot (GitHub) bot flight
The GitHub Copilot bot (GitHub) opened this pull request in tomacheese/tomacheese.com on Jul 20, 2025; merged in 8.4 h.
- Lines
- —
- Files
- —
- Commits
- —
- Reviews
- —
- To merge
- 8.4 h
From the pull request description
CSPとセキュリティヘッダーの実装が完了しました。XSS攻撃やその他のセキュリティ脅威に対する保護を強化しました。 ## 実装したセキュリティ改善 ### セキュリティヘッダー `nuxt.config.ts`の`nitro.routeRules`を使用して、全ルートに以下のセキュリティヘッダーを適用: - **Content-Security-Policy**: XSS攻撃を防止 - `default-src 'self'`: デフォルトは自サイトのみ - `style-src 'self' 'unsafe-inline' fonts.googleapis.com`: スタイル…
Excerpt (first 300 characters) — the full description is on GitHub.
View the pull request on GitHub →
This is your flight? Claim it — sign in with GitHub. Ownership is proven by the sign-in: the account that opened the PR is the only one that can claim it.
Read next
Cite this flight: AgentRiders Flight Log, tomacheese/tomacheese.com#835, record updated Nov 3, 2026, https://agentriders.com/logs/tomacheese/tomacheese.com/835/
Data from public GitHub activity; this page is not affiliated with GitHub or the repository.