Lukas dafe8d61e2 feat(security): add CSRF header constants and security-headers endpoint ...

Move X-BanGUI-Request header name/value to backend/app/utils/constants.py as single source of truth. Add GET /api/v1/config/security-headers endpoint. Update csrf middleware, frontend api client, and docs to use shared constants.

2026-05-03 22:06:43 +02:00

5.8 KiB

Raw Blame History

View Raw