TudorandClaude Opus 4.8
9556595800
PR Checks / Frontend Typecheck + Tests (pull_request) Successful in 1m2s
PR Checks / Backend Smoke (pull_request) Successful in 7s
PR Checks / Build Backend (no push) (pull_request) Successful in 11s
PR Checks / Build Frontend (no push) (pull_request) Successful in 48s
PR Checks / Build Pipeline (no push) (pull_request) Successful in 10s
PR Checks / AI Code Review (Claude) (pull_request) Successful in 8s
Replace X-Frame-Options: SAMEORIGIN with a CSP frame-ancestors directive so analytics.schoolcompare.co.uk (Umami heatmap/recorder) can embed the site while all other origins stay blocked. X-Frame-Options cannot allow a specific sibling subdomain (ALLOW-FROM is deprecated/ignored by modern browsers), so frame-ancestors is the correct replacement. Also update the nginx snippet in DEPLOYMENT.md to match, so the reverse proxy doesn't re-inject a conflicting X-Frame-Options header. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
16 lines
599 B
YAML
16 lines
599 B
YAML
- generic [ref=e2]:
|
|
- generic [ref=e3]: Latest Ofsted inspection
|
|
- generic [ref=e4]:
|
|
- generic [ref=e5]: Our Lady Queen of Hatfield
|
|
- generic [ref=e7]: Outstanding
|
|
- generic [ref=e8]:
|
|
- generic [ref=e9]: Southmead
|
|
- generic [ref=e11]: Good
|
|
- generic [ref=e12]: Grade carried forward
|
|
- generic [ref=e13]:
|
|
- generic [ref=e14]: Greenmead
|
|
- strong [ref=e16]: Report card
|
|
- generic [ref=e17]:
|
|
- generic [ref=e18]: 5 areas Strong standard
|
|
- generic [ref=e19]: 1 area Expected standard
|
|
- generic [ref=e20]: No areas need attention · Safeguarding met |