web/cryptpad
2
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Chuck a few more super-duper-security headers in there

Browse Source
This commit is contained in:
Caleb James DeLisle 2016-10-06 23:02:30 +02:00
parent f8ac3a6ad3
commit 72fc2e7068
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
server.js
View File

@ -41,6 +41,11 @@ app.use(function (req, res, next) {
// documents in ckeditor. // documents in ckeditor.
"img-src data: *" "img-src data: *"
].join('; ')); ].join('; '));
res.setHeader('X-XSS-Protection', '1; mode=block');
res.setHeader('X-Content-Type-Options', 'nosniff');
res.setHeader('X-Frame-Options', 'SAMEORIGIN');
next(); next();
}); });