SID-HARD-05 — Browser Security Controls

Property	Value
Status	verified
Owner	platform
Category	technical
CSF Function	protect
Group	System Hardening Controls

Description

React SPA with CSP headers, SRI (Subresource Integrity), SVG sanitization. WebCrypto API for all crypto operations (no JS crypto libraries). Standard browser security: same-origin policy, CORS enforcement.

Components

• Wallet Frontend

Source References

• wallet-frontend/

Audit Findings

Finding	Severity	Status
EN-P-7 — Partial hardening and error handling	medium	resolved
ISO-T-5 — Partial endpoint and privileged access controls	medium	open
ISO-T-6 — Partial vulnerability and malware protection	medium	open
ISO-T-9 — Partial data leakage prevention	low	open