8 lines
901 B
Plaintext
8 lines
901 B
Plaintext
GOAL - W11 Security headers (odoo-expertos). Branch: fix/w11-headers.
|
|
Repo: C:\Users\eugen\.cursor\projects\Odoo Expertos\odoo-expertos. Work ONLY in this repo.
|
|
Context: FULL-AUDIT-REPORT.md (Part A sec 1). HSTS is present but X-Content-Type-Options, X-Frame-Options, and Referrer-Policy are missing.
|
|
TASK: In vercel.json add a headers rule for source "/(.*)" applying: X-Content-Type-Options: nosniff; X-Frame-Options: SAMEORIGIN; Referrer-Policy: strict-origin-when-cross-origin. Merge with any existing headers block; do not remove existing headers.
|
|
CONSTRAINTS: edit only vercel.json.
|
|
PROVE each turn: run powershell -File seo-audit-2026-05-27\REVIEW.ps1 -Only W11 and paste the full output.
|
|
DONE WHEN: the output contains "W11: PASS" (all 3 headers present), AND you committed on branch fix/w11-headers (show git log -1 --oneline). Stop after 10 turns if blocked and report the FAIL detail.
|