benmichael/gods-eye-view
1
0 Fork 0
mirror of https://github.com/bilawalsidhu/gods-eye-view.git synced 2026-11-05 10:53:59 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(server): keep debug-log timestamps server-owned and send nosniff

Browse Source 
The voice debug log writes the server's timestamp after the client's record,
so a record can no longer replace loggedAt. The dev and preview servers also
send X-Content-Type-Options: nosniff with their shared browser headers.

From the findings in #710.

Co-authored-by: Sunil <[email protected]>
Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>
This commit is contained in:
Sameh KhamisSunilClaude Opus 5.5
 committed 2026-10-02 20:00:11 -07:00
1 parent 98b8c6c581
commit bbf4976f5e
5 files changed
+29 -3
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

src/tooling/viteBuild.test.mjs
+1
View File
@@ -19,6 +19,7 @@ test('explicit build inputs preserve browser-only defines, plugin order and loop
assert.ok(config.server.fs.deny.includes('**/ENVIRONMENT'));
assert.ok(config.server.fs.deny.includes('.env.*'));
assert.equal(config.server.headers['X-Frame-Options'], 'DENY');
assert.equal(config.server.headers['X-Content-Type-Options'], 'nosniff');
const csp = config.server.headers['Content-Security-Policy'];
assert.equal(csp, BROWSER_CSP);
for (const directive of [