feat: implement comprehensive CSRF protection

This commit is contained in:
2025-07-11 18:06:51 +02:00
committed by Kaj Kowalski
parent e7818f5e4f
commit 3e9e75e854
44 changed files with 14964 additions and 6413 deletions

View File

@ -29,8 +29,29 @@
"test:vitest": "vitest run",
"test:vitest:watch": "vitest",
"test:vitest:coverage": "vitest run --coverage",
"test:security-headers": "pnpm exec tsx scripts/test-security-headers.ts",
"test:security": "pnpm test:vitest tests/unit/http-security-headers.test.ts tests/integration/security-headers-basic.test.ts tests/unit/security.test.ts",
"lint:md": "markdownlint-cli2 \"**/*.md\" \"!.trunk/**\" \"!.venv/**\" \"!node_modules/**\"",
"lint:md:fix": "markdownlint-cli2 --fix \"**/*.md\" \"!.trunk/**\" \"!.venv/**\" \"!node_modules/**\""
"lint:md:fix": "markdownlint-cli2 --fix \"**/*.md\" \"!.trunk/**\" \"!.venv/**\" \"!node_modules/**\"",
"migration:backup": "pnpm exec tsx scripts/migration/backup-database.ts full",
"migration:backup:schema": "pnpm exec tsx scripts/migration/backup-database.ts schema",
"migration:backup:data": "pnpm exec tsx scripts/migration/backup-database.ts data",
"migration:validate-db": "pnpm exec tsx scripts/migration/validate-database.ts",
"migration:validate-env": "pnpm exec tsx scripts/migration/environment-migration.ts validate",
"migration:migrate-env": "pnpm exec tsx scripts/migration/environment-migration.ts",
"migration:pre-check": "pnpm exec tsx scripts/migration/pre-deployment-checks.ts",
"migration:deploy": "pnpm exec tsx scripts/migration/deploy.ts",
"migration:deploy:dry-run": "pnpm exec tsx scripts/migration/deploy.ts --dry-run",
"migration:health-check": "pnpm exec tsx scripts/migration/health-checks.ts",
"migration:health-report": "pnpm exec tsx scripts/migration/health-checks.ts --report",
"migration:rollback": "pnpm exec tsx scripts/migration/rollback.ts",
"migration:rollback:dry-run": "pnpm exec tsx scripts/migration/rollback.ts --dry-run",
"migration:rollback:snapshot": "pnpm exec tsx scripts/migration/rollback.ts snapshot",
"migration:test": "pnpm migration:health-check && pnpm test",
"migration:test-trpc": "pnpm exec tsx scripts/migration/trpc-endpoint-tests.ts",
"migration:test-batch": "pnpm exec tsx scripts/migration/batch-processing-tests.ts",
"migration:test-all": "pnpm migration:test-trpc && pnpm migration:test-batch && pnpm migration:health-check",
"migration:full": "pnpm migration:pre-check && pnpm migration:backup && pnpm migration:deploy && pnpm migration:health-check"
},
"dependencies": {
"@prisma/adapter-pg": "^6.10.1",
@ -69,6 +90,7 @@
"canvas-confetti": "^1.9.3",
"class-variance-authority": "^0.7.1",
"clsx": "^2.1.1",
"csrf": "^3.1.0",
"csv-parse": "^5.6.0",
"d3": "^7.9.0",
"d3-cloud": "^1.2.7",