Spent part of the Sunday hardening https://37audits.com. Had to work only in two issues: a missing CORS and enforce a Report-Only CSP mode.

37 Audits37 Audits - Website Monitoring & Audit PlatformContinuous website monitoring and on-demand audits for AI readiness, security, performance, resilience and SEO. Get alerted the moment something breaks.
commit 09fcdc5