diff --git a/cmd/web/middleware.go b/cmd/web/middleware.go index 818c2ab..d4ffad3 100644 --- a/cmd/web/middleware.go +++ b/cmd/web/middleware.go @@ -7,12 +7,12 @@ import ( func secureHeaders(next http.Handler) http.Handler { return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { - //w.Header().Set("Content-Security-Policy", - // "default-src 'self'; style-src 'self' fonts.googleapis.com; font-src fonts.gstatic.com") - //w.Header().Set("Referrer-Policy", "origin-when-cross-origin") - //w.Header().Set("X-Content-Type-Options", "nosniff") - //w.Header().Set("X-Frame-Options", "deny") - //w.Header().Set("X-XSS-Protection", "0") + w.Header().Set("Content-Security-Policy", + "default-src 'self'; style-src 'self' fonts.googleapis.com; font-src fonts.gstatic.com") + w.Header().Set("Referrer-Policy", "origin-when-cross-origin") + w.Header().Set("X-Content-Type-Options", "nosniff") + w.Header().Set("X-Frame-Options", "deny") + w.Header().Set("X-XSS-Protection", "0") next.ServeHTTP(w, r) })