feat(security): #273 enable corp

handler/default.go

@@ -39,5 +39,7 @@ func GetHandler(d *sql.DB, serverSettings *types.ServerSettings) http.Handler {
 		router,
 		middleware.Log,
 		middleware.ContentSecurityPolicy,
-		middleware.Cors(serverSettings))
+		middleware.Cors(serverSettings),
+		middleware.Corp,
+	)
 }