feat(security): enable Content-Security-Plolicy #263

2024-11-19 21:47:53 +01:00
parent 490d858508
commit 45a1cbdfd4
2 changed files with 12 additions and 1 deletions
--- a/handler/default.go
+++ b/handler/default.go
@@ -35,5 +35,5 @@ func GetHandler(d *sql.DB, serverSettings *types.ServerSettings) http.Handler {

 	authHandler.handle(router)

-	return middleware.Logging(middleware.EnableCors(serverSettings, router))
+	return middleware.Logging(middleware.ContentSecurityPolicy(middleware.EnableCors(serverSettings, router)))
 }