🛡️ Sentinel: Add Security Headers to Firebase Config #20

Merged
google-labs-jules[bot] merged 1 commits from sentinel-security-headers-5394727340569705425 into main 2026-01-25 14:15:39 +00:00

1 Commits

Author SHA1 Message Date
google-labs-jules[bot]
5f7f422167 🛡️ Sentinel: [HIGH] Add security headers to firebase.json
Added strict security headers to `firebase.json` for Firebase Hosting.
Headers included:
- X-Content-Type-Options: nosniff
- X-Frame-Options: DENY
- Referrer-Policy: strict-origin-when-cross-origin
- Content-Security-Policy: Includes directives for 'self', Google Fonts, EmailJS, and disallows object/frame embedding.

Also initialized `.jules/sentinel.md` with the first security learning.
2026-01-25 01:35:53 +00:00