fix(security): send upgrade-insecure-requests in production only - #1

Merged

SupaOhm merged 14 commits into

mainfrom

worktree-fix-csp-dev-upgrade

Aug 4, 2026

Commits on Aug 4, 2026

docs: add repo cleanup design spec

authored and
ohm
committed
3024c62
docs: correct and expand repo cleanup spec after self-review

authored and
ohm
committed
fe68876
docs: add repo cleanup implementation plan

authored and
ohm
committed
8d40f38
chore: remove unused service scaffolding and dead code

authored and
ohm
committed
e7d3464
test: add vitest coverage for networking and routing logic

authored and
ohm
committed
9473614
fix(routing): rank tied-cost routes behind the selected path

authored and
ohm
committed
6e71d3b
fix(binary): render a consistent octet for empty and fractional input

authored and
ohm
committed
02b99ea
refactor(arp): derive cache-update step and host data from source

authored and
ohm
committed
b9db28a
fix(networking): reject IPv4 octets with leading zeros

authored and
ohm
committed
ebac0fe
fix(security): enforce CSP instead of report-only

authored and
ohm
committed
073baab
fix(dev): upgrade Next to 16.3.0 and pin the workspace root

authored and
ohm
committed
c8e23e4
chore: track Next-generated agent rule files

authored and
ohm
committed
e2d19f1
fix(security): send upgrade-insecure-requests in production only

authored and
ohm
committed
ad4ef42
docs(security): record that Safari upgrades localhost too

authored and
ohm
committed
f46ad49