Update app.R

app.R

@@ -98,6 +98,26 @@ plot_factor <- function(pi_star_list,
 
 # UI Definition
 ui <- fluidPage(
+    # Force HTTPS and add security headers
+  tags$script(HTML("
+    if (location.protocol !== 'https:' && location.hostname !== 'localhost' && location.hostname !== '127.0.0.1') {
+      location.replace('https:' + window.location.href.substring(window.location.protocol.length));
+    }
+  ")),
+  
+  tags$head(
+    tags$meta(httpEquiv = "Content-Security-Policy", 
+              content = "upgrade-insecure-requests"),
+    tags$meta(httpEquiv = "Strict-Transport-Security", 
+              content = "max-age=31536000; includeSubDomains"),
+    tags$meta(httpEquiv = "X-Content-Type-Options", 
+              content = "nosniff"),
+    tags$meta(httpEquiv = "X-Frame-Options", 
+              content = "DENY"),
+    tags$meta(httpEquiv = "X-XSS-Protection", 
+              content = "1; mode=block")
+  ),
+  
   titlePanel(
     "Selecting Optimal Candidate Profiles in Adversarial Environments: Case Study using a 2016 Conjoint",
     windowTitle = "StrategizeLab — Optimal Candidate Profiles Explorer"