Felipe Cardoso 80c26c3df2 Enhance security headers middleware with configurable CSP modes ...

- Introduced `CSP_MODE` setting with `strict`, `relaxed`, and `disabled` options for flexible content security policies.
- Updated middleware to apply varying CSP rules based on mode and request context (e.g., API docs).
- Improved security and frontend compatibility with detailed policy definitions for external resources.
- Defaulted `CSP_MODE` to `relaxed`, ensuring balanced security and usability in modern applications.

2025-10-31 12:50:34 +01:00

5.4 KiB

Raw Blame History

View Raw