scottk/databunker
1
0
Fork 0
mirror of https://github.com/optim-enterprises-bv/databunker.git synced 2025-10-29 17:12:22 +00:00
Code Issues Packages Projects Releases Wiki Activity

add custom secure http headers

Browse Source
This commit is contained in:
root
2022-03-09 21:23:48 +00:00
parent a22db1e584
commit be0a06d6fb
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
src/bunker.go
View File

@@ -419,6 +419,11 @@ func reqMiddleware(handler http.Handler) http.Handler {
//log.Printf("Set host %s\n", r.Host)
autocontext.Set(r, "host", r.Host)
w.Header().Set("Access-Control-Allow-Origin", "*")
w.Header().Set("X-Frame-Options", "SAMEORIGIN")
w.Header().Set("Strict-Transport-Security", "max-age=31536000; includeSubDomains; preload")
w.Header().Set("Content-Security-Policy", "default-src 'self' http: https: data: blob: 'unsafe-inline'")
w.Header().Set("X-XSS-Protection", "1; mode=block")
w.Header().Set("X-Content-Type-Options", "nosniff")
w2 := NewCustomResponseWriter(w)
if strings.Contains(r.Header.Get("Accept-Encoding"), "gzip") {
w2.Header().Set("Vary", "Accept-Encoding")