Repository navigation

feat(security): add HSTS header to all REST and MCP HTTP responses - #21

Merged

fedorov merged 6 commits into

mainfrom

feat/hsts-header

Jul 13, 2026

Merged

feat(security): add HSTS header to all REST and MCP HTTP responses#21
fedorov merged 6 commits into
mainfrom
feat/hsts-header

Commits on Jul 13, 2026
- feat(security): add HSTS header to all REST and MCP HTTP responses
  
  fedorov
  and
  claude
  committed
  0c37a1c
- style: ruff format for the MCP HSTS assertion
  
  fedorov
  and
  claude
  committed
  f61e917
- fix: address Copilot review — preflight HSTS test, MCP deploy check, ordering comment
  
  fedorov
  and
  claude
  committed
  b94701c
- fix: address Copilot round 2 — no duplicate HSTS header, settings-derived test expectations
  
  fedorov
  and
  claude
  committed
  c1e9a44
- fix: address Copilot round 3 — reject negative max-age, honor the 0-disables toggle in tests
  
  fedorov
  and
  claude
  committed
  51c8214
- docs(changelog): fold the HSTS entry into 3.0.0b1, which is not yet tagged
  
  fedorov
  and
  claude
  committed
  4166735