LV 1.2.6 — Sicherheit
REQ-1.2.6-SECURITY
Nachweisstufe: TECHNISCHER POC
Wird gezeigt
- ✓ CSP with per-request nonces (no script-src unsafe-inline)
- ✓ X-Content-Type-Options, X-Frame-Options, Referrer-Policy, Permissions-Policy
- ✓ HSTS on secure connections
- ✓ Craft's built-in CSRF protection (active by default on all POST forms)
Technische Dokumentation
docs/security.md