Stashlify’s frontend now ships with a stronger browser security baseline to better protect merchants and staff while keeping the app compatible with existing embeds and public pages.
What changed
- Added more restrictive security headers for browser behavior and cross-origin handling
- Strengthened the default Content Security Policy baseline
- Tightened resource and frame rules while preserving required integrations
This update is focused on reducing avoidable browser-side risk without changing the day-to-day product workflow for stores using Stashlify.