Jacky/Hulumath-Web
2
2
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 3 Wiki Activity

fix: verify edge-owned HSTS during deployment #42

Merged
Jacky merged 1 commits from fix/edge-hsts-deploy-check into main 2026-09-29 00:47:50 +08:00
Conversation 0 Commits 1 Files Changed 5
+35
Jacky commented 2026-09-29 00:40:21 +08:00
Owner
Copy Link
Copy Source

Makes edge-owned HSTS explicit for the Nginx-fronted deployment, verifies a non-zero Strict-Transport-Security header on the local TLS edge before silencing Django security.W004, and adds regression coverage. No HSTS policy is enabled blindly. Validation: context check, Ruff, Python compile, shell syntax and live HTTPS header probe.

Makes edge-owned HSTS explicit for the Nginx-fronted deployment, verifies a non-zero Strict-Transport-Security header on the local TLS edge before silencing Django security.W004, and adds regression coverage. No HSTS policy is enabled blindly. Validation: context check, Ruff, Python compile, shell syntax and live HTTPS header probe.
Jacky added 1 commit 2026-09-29 00:40:22 +08:00
fix: verify edge-owned HSTS during deployment
CI / test (pull_request) Successful in 6m38s
Details
PR合并自动部署 / release-check (pull_request) Successful in 3s
Details
PR合并自动部署 / deploy (pull_request) Failing after 11s
Details
6d8ed567b0
Jacky scheduled this pull request to auto merge when all checks succeed 2026-09-29 00:40:23 +08:00
Jacky merged commit f7536d3a3f into main 2026-09-29 00:47:50 +08:00
Jacky deleted branch fix/edge-hsts-deploy-check 2026-09-29 00:47:50 +08:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
Compat/Breaking
Breaking change that won't be backward compatible
 Kind/Bug
Something is not working
 Kind/Documentation
Documentation changes
 Kind/Enhancement
Improve existing functionality
 Kind/Feature
New functionality
 Kind/Security
This is security issue
 Kind/Testing
Issue or pull request related to testing
Priority
Critical
1
The priority is critical
Priority
High
2
The priority is high
Priority
Low
4
The priority is low
Priority
Medium
3
The priority is medium
Reviewed
Confirmed
1
Issue has been confirmed
Reviewed
Duplicate
2
This issue or pull request already exists
Reviewed
Invalid
3
Invalid issue
Reviewed
Won't Fix
3
This issue won't be fixed
Status
Abandoned
3
Somebody has started to work on this but abandoned work
Status
Blocked
1
Something is blocking this issue or pull request
Status
Need More Info
2
Feedback is required to reproduce issue or to continue work
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
huluxia xunyulin Jacky (SuperJacky6)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: Jacky/Hulumath-Web#42