mirror of
https://github.com/jech/galene.git
synced 2024-11-09 02:05:59 +01:00
Add Referrer-Policy and X-Content-Type-Options headers
This commit is contained in:
parent
df55c1e7cc
commit
02e7c7e824
1 changed files with 6 additions and 0 deletions
|
@ -103,6 +103,12 @@ func cspHeader(w http.ResponseWriter, connect string) {
|
|||
}
|
||||
w.Header().Add("Content-Security-Policy",
|
||||
c+" img-src data: 'self'; media-src blob: 'self'; default-src 'self'")
|
||||
|
||||
// Make browser stop sending referrer information
|
||||
w.Header().Add("Referrer-Policy", "no-referrer")
|
||||
|
||||
// Require correct MIME type to load CSS and JS
|
||||
w.Header().Add("X-Content-Type-Options", "nosniff")
|
||||
}
|
||||
|
||||
func notFound(w http.ResponseWriter) {
|
||||
|
|
Loading…
Reference in a new issue