Worked on security-hardening for the include-dcc/include-portal-ui repository, delivering a comprehensive suite of HTTP security headers and a refined Content Security Policy. Focused on reducing the risk of misconfiguration, the work introduced protections against cross-site scripting, enforced a strict Referrer Policy, and applied X-Content-Type-Options and Feature Policy headers to control browser behavior. The approach included iterative CSP cleanup to simplify policy management and remove redundant directives, improving maintainability. All changes were traceable through specific commits, supporting security governance and auditability. The work demonstrated expertise in HTTP headers, security configuration, and web security, aligning the portal with enterprise security standards.