fix(security): update security header names to lowercase and add tests

2026-02-25 03:39:49 +05:30
parent f358e4cd3e
commit 58db8be117
2 changed files with 30 additions and 4 deletions
--- a/backend/app/core/security_headers.py
+++ b/backend/app/core/security_headers.py
@@ -11,10 +11,10 @@ if TYPE_CHECKING:  # pragma: no cover
 class SecurityHeadersMiddleware:
    """Inject configured security headers into every HTTP response."""

-    _X_CONTENT_TYPE_OPTIONS = b"X-Content-Type-Options"
-    _X_FRAME_OPTIONS = b"X-Frame-Options"
-    _REFERRER_POLICY = b"Referrer-Policy"
-    _PERMISSIONS_POLICY = b"Permissions-Policy"
+    _X_CONTENT_TYPE_OPTIONS = b"x-content-type-options"
+    _X_FRAME_OPTIONS = b"x-frame-options"
+    _REFERRER_POLICY = b"referrer-policy"
+    _PERMISSIONS_POLICY = b"permissions-policy"

    def __init__(
        self,