|
|
@ -661,7 +661,7 @@ func addSecurityHeaders(h http.Handler) http.Handler { |
|
|
|
|
|
|
|
|
|
|
|
func (s securityHeaderHandler) ServeHTTP(w http.ResponseWriter, r *http.Request) { |
|
|
|
func (s securityHeaderHandler) ServeHTTP(w http.ResponseWriter, r *http.Request) { |
|
|
|
header := w.Header() |
|
|
|
header := w.Header() |
|
|
|
header.Set("X-XSS-Protection", "\"1; mode=block\"") // Prevents against XSS attacks
|
|
|
|
header.Set("X-XSS-Protection", "1; mode=block") // Prevents against XSS attacks
|
|
|
|
header.Set("Content-Security-Policy", "block-all-mixed-content") // prevent mixed (HTTP / HTTPS content)
|
|
|
|
header.Set("Content-Security-Policy", "block-all-mixed-content") // prevent mixed (HTTP / HTTPS content)
|
|
|
|
s.handler.ServeHTTP(w, r) |
|
|
|
s.handler.ServeHTTP(w, r) |
|
|
|
} |
|
|
|
} |
|
|
|