mirrors/dumb
1
0
Fork 0
mirror of https://github.com/rramiachraf/dumb.git synced 2025-04-04 21:37:38 +03:00
Code Issues Projects Releases Packages Wiki Activity

feat: disable loading images from external entities

Browse source
This commit is contained in:
rramiachraf 2023-01-27 14:31:10 +01:00
parent 544734b843
commit c03bd495f6
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
utils.go
View file

@ -43,7 +43,7 @@ func write(w http.ResponseWriter, status int, data []byte) {
func securityHeaders(next http.Handler) http.Handler {
return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
csp := "default-src 'self'; script-src 'self'; style-src 'self'; img-src 'self' images.genius.com; object-src 'none'"
csp := "default-src 'self'; script-src 'self'; style-src 'self'; img-src 'self'; object-src 'none'"
w.Header().Add("content-security-policy", csp)
w.Header().Add("referrer-policy", "no-referrer")
w.Header().Add("x-content-type-options", "nosniff")