Skip to content

security(frontend): proxy indexer via same-origin /api and harden CSP - #284

Merged
David1984TK merged 1 commit into
David1984TK:mainfrom
Caneryy:feat/issue-251
Jul 29, 2026
Merged

security(frontend): proxy indexer via same-origin /api and harden CSP#284
David1984TK merged 1 commit into
David1984TK:mainfrom
Caneryy:feat/issue-251

Conversation

@Caneryy

@Caneryy Caneryy commented Jul 29, 2026

Copy link
Copy Markdown
Contributor

Closes #251

Summary

  • security(frontend): ocultar el origen del indexer con proxy same-origin /api + CSP endurecido [P2]

Test plan

  • Relevant tests pass locally
  • Manual verification on affected UI or API paths

@Caneryy
Caneryy requested a review from David1984TK as a code owner July 29, 2026 00:34
@vercel

vercel Bot commented Jul 29, 2026

Copy link
Copy Markdown

@Caneryy is attempting to deploy a commit to the david1984tk's projects Team on Vercel.

A member of the Team first needs to authorize it.

@David1984TK David1984TK left a comment

Copy link
Copy Markdown
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Enfoque correcto para #251: rewrite /api/* condicionado por host solo a staging (donde ya hay indexer real desplegado), no toca prod. Resuelve el problema de placeholder que bloqueó #260. CI real en verde. Aprobado.

@David1984TK
David1984TK merged commit e994138 into David1984TK:main Jul 29, 2026
7 of 8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

security(frontend): ocultar el origen del indexer con proxy same-origin /api + CSP endurecido [P2]

2 participants