Skip to content

Harden front-end security: SRI, CSP, and HTML sanitization - #1006

Open
riderx wants to merge 22 commits into
mainfrom
cursor/frontend-security-hardening-b3ae
Open

riderx wants to merge 22 commits into
mainfrom
cursor/frontend-security-hardening-b3ae

chore: re-trigger CodeRabbit review on green CI at 47a739485

3fcdc74
Select commit
Loading
Failed to load commit list.
SonarQubeCloud / SonarCloud Code Analysis succeeded Sep 8, 2026 in 58s

Annotations

Check warning on line 63 in scripts/generate-security-headers.mjs

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Simplify this regular expression to reduce its runtime, as it has super-linear performance due to backtracking.

See more on https://sonarcloud.io/project/issues?id=Cap-go_website&issues=AaBs8Ew8MwQY_bvu8z1X&open=AaBs8Ew8MwQY_bvu8z1X&pullRequest=1006

Check failure on line 58 in scripts/generate-external-integrity.mjs

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Refactor this function to reduce its Cognitive Complexity from 16 to the 15 allowed.

See more on https://sonarcloud.io/project/issues?id=Cap-go_website&issues=AaBs8E2TMwQY_bvu8z1Y&open=AaBs8E2TMwQY_bvu8z1Y&pullRequest=1006

Check warning on line 81 in scripts/collect-csp-script-hashes.mjs

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Extract this nested ternary operation into an independent statement.

See more on https://sonarcloud.io/project/issues?id=Cap-go_website&issues=AaCB5N0QAsAxygQ3_NO_&open=AaCB5N0QAsAxygQ3_NO_&pullRequest=1006

Check warning on line 32 in scripts/generate-security-headers.mjs

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Simplify this regular expression to reduce its runtime, as it has super-linear performance due to backtracking.

See more on https://sonarcloud.io/project/issues?id=Cap-go_website&issues=AaBs8Ew8MwQY_bvu8z1V&open=AaBs8Ew8MwQY_bvu8z1V&pullRequest=1006