- Created comprehensive verification documentation - Confirmed all 4 security headers are properly configured in next.config.ts: * Content-Security-Policy with comprehensive directives * Strict-Transport-Security (HSTS) with max-age=31536000 * Referrer-Policy set to strict-origin-when-cross-origin * Permissions-Policy restricting sensitive browser features - Headers follow Next.js documentation patterns and best practices - Note: Headers configured correctly for production deployment - Added verification script and investigation documentation Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
39 lines
2.4 KiB
JSON
39 lines
2.4 KiB
JSON
{
|
|
"sandbox": {
|
|
"enabled": true,
|
|
"autoAllowBashIfSandboxed": true
|
|
},
|
|
"permissions": {
|
|
"defaultMode": "acceptEdits",
|
|
"allow": [
|
|
"Read(./**)",
|
|
"Write(./**)",
|
|
"Edit(./**)",
|
|
"Glob(./**)",
|
|
"Grep(./**)",
|
|
"Read(C:\\Users\\damja\\WebstormProjects\\Portfolio\\.auto-claude\\worktrees\\tasks\\013-add-missing-critical-security-headers-csp-hsts-per/**)",
|
|
"Write(C:\\Users\\damja\\WebstormProjects\\Portfolio\\.auto-claude\\worktrees\\tasks\\013-add-missing-critical-security-headers-csp-hsts-per/**)",
|
|
"Edit(C:\\Users\\damja\\WebstormProjects\\Portfolio\\.auto-claude\\worktrees\\tasks\\013-add-missing-critical-security-headers-csp-hsts-per/**)",
|
|
"Glob(C:\\Users\\damja\\WebstormProjects\\Portfolio\\.auto-claude\\worktrees\\tasks\\013-add-missing-critical-security-headers-csp-hsts-per/**)",
|
|
"Grep(C:\\Users\\damja\\WebstormProjects\\Portfolio\\.auto-claude\\worktrees\\tasks\\013-add-missing-critical-security-headers-csp-hsts-per/**)",
|
|
"Read(C:\\Users\\damja\\WebstormProjects\\Portfolio\\.auto-claude\\worktrees\\tasks\\013-add-missing-critical-security-headers-csp-hsts-per\\.auto-claude\\specs\\013-add-missing-critical-security-headers-csp-hsts-per/**)",
|
|
"Write(C:\\Users\\damja\\WebstormProjects\\Portfolio\\.auto-claude\\worktrees\\tasks\\013-add-missing-critical-security-headers-csp-hsts-per\\.auto-claude\\specs\\013-add-missing-critical-security-headers-csp-hsts-per/**)",
|
|
"Edit(C:\\Users\\damja\\WebstormProjects\\Portfolio\\.auto-claude\\worktrees\\tasks\\013-add-missing-critical-security-headers-csp-hsts-per\\.auto-claude\\specs\\013-add-missing-critical-security-headers-csp-hsts-per/**)",
|
|
"Read(C:\\Users\\damja\\WebstormProjects\\Portfolio\\.auto-claude/**)",
|
|
"Write(C:\\Users\\damja\\WebstormProjects\\Portfolio\\.auto-claude/**)",
|
|
"Edit(C:\\Users\\damja\\WebstormProjects\\Portfolio\\.auto-claude/**)",
|
|
"Glob(C:\\Users\\damja\\WebstormProjects\\Portfolio\\.auto-claude/**)",
|
|
"Grep(C:\\Users\\damja\\WebstormProjects\\Portfolio\\.auto-claude/**)",
|
|
"Bash(*)",
|
|
"WebFetch(*)",
|
|
"WebSearch(*)",
|
|
"mcp__context7__resolve-library-id(*)",
|
|
"mcp__context7__get-library-docs(*)",
|
|
"mcp__graphiti-memory__search_nodes(*)",
|
|
"mcp__graphiti-memory__search_facts(*)",
|
|
"mcp__graphiti-memory__add_episode(*)",
|
|
"mcp__graphiti-memory__get_episodes(*)",
|
|
"mcp__graphiti-memory__get_entity_edge(*)"
|
|
]
|
|
}
|
|
} |