🔒 SECURITY: Added XSS protection, security headers, and audit documentation

This commit is contained in:
EP
2025-08-21 20:44:08 -07:00
parent 73d8e888dc
commit dcfb1b33dd
6 changed files with 354 additions and 1 deletions

View File

@@ -41,7 +41,7 @@ const config = {
// Security settings
security: {
jwtSecret: process.env.JWT_SECRET || 'your-secret-key-change-this',
jwtSecret: process.env.JWT_SECRET || (process.env.NODE_ENV === 'production' ? null : 'dev-secret-key'),
bcryptRounds: 12,
sessionTimeout: 24 * 60 * 60 * 1000 // 24 hours
},