skillhub/server
wurongjie b807fb3ee1 fix(security): harden CSP policy and hide nginx server tokens
- Remove 'unsafe-inline' and 'unsafe-eval' from script-src directive
- Restrict connect-src to 'self' only
- Disable nginx server_tokens to hide version information

Signed-off-by: wurongjie <wurongjie@uniontech.com>
2026-08-24 17:02:42 +08:00
..
.mvn docs: add Maven mirror config and troubleshooting guide for China developers (#233) 2026-04-07 09:50:07 +08:00
scripts feat(notification): add in-app notifications and harden delivery 2026-03-23 12:31:28 +08:00
skillhub-app feat(namespace): add admin namespace management 2026-08-12 12:39:24 +08:00
skillhub-auth fix(security): harden CSP policy and hide nginx server tokens 2026-08-24 17:02:42 +08:00
skillhub-domain fix(publish): emit event on confirm publish (#738) 2026-08-21 17:52:25 +08:00
skillhub-infra fix(governance): safely delete version dependencies 2026-07-30 17:52:08 +08:00
skillhub-notification fix(notification): keep SSE live push streams open (#524) 2026-06-16 11:57:49 +08:00
skillhub-search feat(search): index compliance snapshot mappings 2026-08-07 15:46:06 +08:00
skillhub-storage fix(storage): disable chunked encoding for Aliyun OSS compatibility 2026-05-06 13:56:55 +08:00
.dockerignore feat(staging): optimize staging build with local Maven packaging 2026-03-14 14:21:06 +08:00
Dockerfile feat: add initial RISC-V image support (#725) 2026-08-24 16:37:34 +08:00
Dockerfile.dev fix(storage): defer S3 bucket verification until first access (#289) 2026-04-12 15:24:09 +08:00
mvnw feat: initialize Maven multi-module project structure 2026-03-11 22:52:04 +08:00
mvnw.cmd feat: initialize Maven multi-module project structure 2026-03-11 22:52:04 +08:00
pom.xml feat(notification): add in-app notifications and harden delivery 2026-03-23 12:31:28 +08:00