v1.2.0

Highlights

"How it's done" — live source code embeds

Every feature page (Validate, Convert, Diff, Fix, Join, Overlay, Explore) now includes a "How it's done" section that embeds the actual handler source code from this repository using emgithub. This replaces the previous static "Usage Examples" sections with live, syntax-highlighted views of the production code — turning the site into a showcase of how oastools is used in practice.

• Embeds are pinned to the deployed version tag, so the code shown always matches what's running
• Non-release builds (dev, dirty tags) gracefully fall back to the main branch
• The Explore page embeds only the core parse + analysis block (~58 lines) to keep it focused

Security headers

Added SecurityHeaders middleware that sets defense-in-depth HTTP headers on every response:

Header	Value
Content-Security-Policy	Restricts script/style sources to self, unpkg.com, cdnjs.cloudflare.com, and emgithub.com
X-Content-Type-Options	nosniff
X-Frame-Options	DENY
Referrer-Policy	strict-origin-when-cross-origin

What's Changed

• feat: replace Usage Examples with emgithub handler embeds by @erraggy in #43

Full Changelog: v1.1.0...v1.2.0