feat: implement Content-Security-Policy for admin SPA and enhance session cookie security

2026-07-19 21:00:32 +03:30
parent e670b38821
commit 6275b3da1e
8 changed files with 359 additions and 5 deletions
@@ -1,4 +1,6 @@

 ###> symfony/framework-bundle ###
-APP_SECRET=42f34156531bad221462ff02bd43f42b
+# APP_SECRET intentionally not committed here — set it in .env.local (git-ignored).
+# .env.dev loads AFTER .env.local, so a value here would override the local one.
 ###< symfony/framework-bundle ###
+APP_SECRET = c7f26807530b758460918148a3d11b2f