Baseline controls
The site is statically exported and delivered through Cloudflare to reduce attack surface, with HTTPS, HSTS, CSP, and common browser security headers.
- No secrets in frontend source or version control
- Unnecessary browser permissions restricted
- Dependencies and deployment settings reviewed