Blomios d538808a0d feat(server): servir dist same-origin + durcissement (logout, logs sécurité, static hardening) (#13) ...

Sert le bundle web (dist/) en same-origin via --web-root / IDEA_WEB_ROOT
ou le web/ packagé. serve_static durci : anti path-traversal, typage MIME,
X-Content-Type-Options nosniff, CSP, fallback SPA. Ajoute POST /api/logout
qui révoque la session HTTP + WS, et une journalisation sécurité via
SecurityLogger. Documente le déploiement remote (dev local, packaging web/,
reverse proxy HTTPS).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-07-16 08:10:31 +02:00

..

adr

docs(adr): contrat futur du seam LLM de résumé de handoff (LS5)

2026-06-22 12:29:44 +02:00

LS8-live-state-persistence-closure.md

docs(live-state): clôture programme persistance/live-state (LS8)

2026-06-22 17:53:02 +02:00

server-client-mode-remote.md

feat(server): servir dist same-origin + durcissement (logout, logs sécurité, static hardening) (#13)

2026-07-16 08:10:31 +02:00

ticket13-b0-backend-transport-inventory.md

docs(ticket13): inventaire transport backend et frontend (B0)

2026-07-15 09:50:10 +02:00

ticket13-f0-frontend-transport-inventory.md

docs(ticket13): inventaire transport backend et frontend (B0)

2026-07-15 09:50:10 +02:00