Lbenedar/snippetbox
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ch10.2_2

Browse Source
This commit is contained in:
lbenedar
2026-03-05 18:12:11 +03:00
parent 3c7cb22298
commit f252c2c801
1 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
cmd/web/middleware.go
View File

@@ -7,12 +7,12 @@ import (
func secureHeaders(next http.Handler) http.Handler {
return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
//w.Header().Set("Content-Security-Policy",
// "default-src 'self'; style-src 'self' fonts.googleapis.com; font-src fonts.gstatic.com")
//w.Header().Set("Referrer-Policy", "origin-when-cross-origin")
//w.Header().Set("X-Content-Type-Options", "nosniff")
//w.Header().Set("X-Frame-Options", "deny")
//w.Header().Set("X-XSS-Protection", "0")
w.Header().Set("Content-Security-Policy",
"default-src 'self'; style-src 'self' fonts.googleapis.com; font-src fonts.gstatic.com")
w.Header().Set("Referrer-Policy", "origin-when-cross-origin")
w.Header().Set("X-Content-Type-Options", "nosniff")
w.Header().Set("X-Frame-Options", "deny")
w.Header().Set("X-XSS-Protection", "0")
next.ServeHTTP(w, r)
})