mirror of
https://github.com/maziggy/bambuddy.git
synced 2026-10-07 06:31:22 +02:00
Set X-Content-Type-Options, X-Frame-Options, and Referrer-Policy on all responses. CSP omitted (React inline styles would require unsafe-inline, negating protection). HSTS omitted (LAN app commonly accessed over HTTP).