Lbenedar/snippetbox
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ch10.2

Browse Source
This commit is contained in:
lbenedar
2026-03-05 18:11:34 +03:00
parent b644c0384e
commit 3c7cb22298
3 changed files with 8 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
cmd/web/middleware.go
View File

@@ -7,12 +7,12 @@ import (
func secureHeaders(next http.Handler) http.Handler {
return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
w.Header().Set("Content-Security-Policy",
"default-src 'self'; style-src 'self' fonts.googleapis.com; font-src fonts.gstatic.com")
w.Header().Set("Referrer-Policy", "origin-when-cross-origin")
w.Header().Set("X-Content-Type-Options", "nosniff")
w.Header().Set("X-Frame-Options", "deny")
w.Header().Set("X-XSS-Protection", "0")
//w.Header().Set("Content-Security-Policy",
// "default-src 'self'; style-src 'self' fonts.googleapis.com; font-src fonts.gstatic.com")
//w.Header().Set("Referrer-Policy", "origin-when-cross-origin")
//w.Header().Set("X-Content-Type-Options", "nosniff")
//w.Header().Set("X-Frame-Options", "deny")
//w.Header().Set("X-XSS-Protection", "0")
next.ServeHTTP(w, r)
})