Commit Graph

7 Commits

Author SHA1 Message Date
hsiegeln
2945c63f2a Document CSP directive rationale and strengthen inline-script assertion
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-24 17:11:16 +02:00
hsiegeln
3432d509df Add security-headers middleware with strict CSP (TDD)
Exports buildSecurityHeaders() (pure, testable) and wires it into the
Astro onRequest middleware. Adds astro:middleware alias in vitest config
so the unit tests run outside Astro's build context. 14 tests pass (7
existing + 7 new).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-24 17:06:45 +02:00
hsiegeln
3a155efa69 Add sign-up URL test coverage and remove unused beforeEach import 2026-04-24 17:03:57 +02:00
hsiegeln
8ab30ca8fc Add auth URL config module with validation (TDD)
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-24 16:59:50 +02:00
hsiegeln
d0e7d13f09 Fix focus ring visibility and add DM Sans 600 weight 2026-04-24 16:57:51 +02:00
hsiegeln
ec320f7ae4 Add Tailwind config with Mission Control tokens and global styles
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-24 16:51:37 +02:00
hsiegeln
b9b0dcb6ec Scaffold Astro 5 project with static output and i18n-ready content collections 2026-04-24 16:30:21 +02:00