fix: add security headers to Java backend to address ZAP findings#416

Open

DerekRoberts wants to merge 17 commits intomainfrom

fix/zap-security-headers-java

Commits on Dec 15, 2025

fix: add security headers to Java backend to address ZAP findings
DerekRoberts
committed

Commits on Dec 18, 2025

feat: combine best parts from both security headers PRs
DerekRoberts
committed
fix: improve path matching and add test coverage for SecurityHeadersFilter
DerekRoberts
committed
Merge branch 'main' into fix/zap-security-headers-java
DerekRoberts
authored
fix: use MultivaluedMap instead of HttpHeaders for cookie handling
DerekRoberts
committed
fix: adjust test expectations for Quarkus-specific endpoints
DerekRoberts
committed
fix: address all Copilot review feedback for SecurityHeadersFilter
DerekRoberts
committed
fix: address additional Copilot review feedback
DerekRoberts
committed
fix: replace regex with string check to prevent ReDoS vulnerability
DerekRoberts
committed
fix: correct length check in path matching logic
DerekRoberts
committed
fix: correct character index in path matching
DerekRoberts
committed