John Cardinal 1ccbd7745c case 4727 - safe security headers on every response ...

Every response carries X-Content-Type-Options: nosniff, X-Frame-Options:
SAMEORIGIN and Referrer-Policy: strict-origin, so self-hosted installs
get them too (the hosted nginx sends the same values). F35 (4727 step 6).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-24 22:01:38 -07:00

..

AyaNova

case 4727 - safe security headers on every response

2026-10-24 22:01:38 -07:00