Skip to content

Harden demo security headers and live-mode gates - #1

Merged
devtechedge merged 1 commit into
mainfrom
harden/demo-security-2026-09-06
Sep 6, 2026
Merged

Harden demo security headers and live-mode gates#1
devtechedge merged 1 commit into
mainfrom
harden/demo-security-2026-09-06

Conversation

@devtechedge

Copy link
Copy Markdown
Owner

Summary

  • Add security headers (CSP, frame deny, nosniff, referrer, permissions)
  • Gate live LLM/search spend behind LIVE_MODE (+ optional PUBLIC_RUN_TOKEN / x-run-token)
  • Same-origin + in-memory rate limits on expensive API routes (server apps)
  • Update SECURITY.md (2026-09-06) with controls and residual risk honesty

Test plan

  • Simulated demo still works without LIVE_MODE
  • Cross-origin POST rejected; rate limit returns 429 after burst
  • Headers present on Vercel responses after deploy

Safer defaults for public portfolio demos: headers, live-mode gates, origin/rate limits.
@vercel

vercel Bot commented Sep 6, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
veritas-engine Error Error Sep 6, 2026 2:30am UTC

@devtechedge
devtechedge merged commit 6c19bc6 into main Sep 6, 2026
1 check was pending
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant