Skip to content

Improve cold-start latency and add missing security headers - #411

Open
JP16914 wants to merge 1 commit into
mainfrom
phuoctran-new-finbud
Open

Improve cold-start latency and add missing security headers#411
JP16914 wants to merge 1 commit into
mainfrom
phuoctran-new-finbud

Conversation

@JP16914

@JP16914 JP16914 commented Apr 3, 2026

Copy link
Copy Markdown
Collaborator

Summary

This PR improves homepage cold-start latency and adds missing security headers to strengthen the application's baseline security.

Changes made

  • Improved homepage reload / cold-start performance
  • Added Content-Security-Policy
  • Added X-Content-Type-Options: nosniff
  • Added X-Frame-Options: DENY
  • Added stricter CSP directives for images, fonts, connections, forms, and framing

Why

  • Reduce initial load delay on the homepage
  • Address missing security headers found during testing
  • Improve the site's security posture for stricter network environments

Validation

  • Verified response headers in DevTools
  • Confirmed CSP is applied correctly on the homepage

@JP16914
JP16914 requested a review from finbud2024 April 3, 2026 19:30
@netlify

netlify Bot commented Apr 3, 2026

Copy link
Copy Markdown

Deploy Preview for finbud-ai ready!

Name Link
🔨 Latest commit cf586f1
🔍 Latest deploy log https://app.netlify.com/projects/finbud-ai/deploys/69d01552a0fa920008f2fdd7
😎 Deploy Preview https://deploy-preview-411--finbud-ai.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant