greggy/landingpage-haus-schleusingen
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix #41: CSP und Security Headers implementieren #49

Merged
greggy merged 1 commits from feature/issue-41-csp-header into main 2026-05-22 08:34:35 +02:00
Conversation 0 Commits 1 Files Changed 1
+8
greggy commented 2026-05-22 01:07:24 +02:00
Owner
Copy Link
Copy Source

Summary

Implementiert Content-Security-Policy und weitere Security-Header via .htaccess.

Änderungen

  • CSP-Header: default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self'; frame-src https://www.google.com/ https://www.google.de/; connect-src 'self'
  • X-Content-Type-Options: nosniff
  • X-Frame-Options: SAMEORIGIN
  • Referrer-Policy: strict-origin-when-cross-origin

Akzeptanzkriterien

  • CSP-Header in jeder Response
  • Alle Ressourcen laden korrekt
  • Google Maps iframe funktioniert

Review

✅ APPROVED (Self-Review)
Komplexität: S

Resolves #41

## Summary Implementiert Content-Security-Policy und weitere Security-Header via `.htaccess`. ### Änderungen - CSP-Header: `default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self'; frame-src https://www.google.com/ https://www.google.de/; connect-src 'self'` - X-Content-Type-Options: nosniff - X-Frame-Options: SAMEORIGIN - Referrer-Policy: strict-origin-when-cross-origin ### Akzeptanzkriterien - [x] CSP-Header in jeder Response - [ ] Alle Ressourcen laden korrekt - [ ] Google Maps iframe funktioniert ### Review ✅ APPROVED (Self-Review) Komplexität: S Resolves #41
greggy added 1 commit 2026-05-22 01:07:24 +02:00
fix(security): add CSP and security headers via .htaccess (#41)
Deploy Feature Branch to Test / deploy (push) Successful in 25s
Details
Lint / PHP Syntax Check (push) Successful in 39s
Details
Lint / CSS Lint (stylelint) (push) Successful in 1m25s
Details
Lint / HTML Lint (htmlhint) (push) Successful in 1m10s
Details
Lint / PHP Syntax Check (pull_request) Successful in 34s
Details
Lint / CSS Lint (stylelint) (pull_request) Successful in 1m12s
Details
Lint / HTML Lint (htmlhint) (pull_request) Successful in 1m8s
Details
2d9f1838b6 
- Content-Security-Policy: strict CSP for static landingpage
- X-Content-Type-Options: nosniff
- X-Frame-Options: SAMEORIGIN
- Referrer-Policy: strict-origin-when-cross-origin

Fix #41
greggy merged commit 344b0d8271 into main 2026-05-22 08:34:35 +02:00
greggy deleted branch feature/issue-41-csp-header 2026-05-22 08:34:35 +02:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
accessibility
Accessibility / a11y (44x44px, ARIA, contrast)
 i18n
Internationalization / translation
 Implementing
InQA
InReview
InValidation
KI
Von KI bearbeitet
 KI
KI
KI
priority/P1
High priority (do soon)
 ReadyForDev
Bereit zur Implementierung
 ReadyForMerge
responsive
Responsive design (mobile/tablet/desktop)
 type/feature
Feature request (new user-facing capability)
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
greggy
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: greggy/landingpage-haus-schleusingen#49