ulsklyc/yuvomi v0.67.5

on GitHub

Security

• Added Content-Security-Policy and Referrer-Policy meta tags to all landing-site pages (index.html, install.html, impressum.html, datenschutz.html). The CSP restricts resources to same-origin plus the inline styles/scripts the pages actually use; the referrer policy is strict-origin-when-cross-origin. (Clickjacking headers such as X-Frame-Options/frame-ancestors only take effect as real HTTP headers and cannot be enforced on plain GitHub Pages.)