x/web-app-template
Archived
Template
2
0
Fork 0
Code Issues 13 Pull Requests 4 Actions Packages Activity

feat(security): enable Content-Security-Plolicy for external js
All checks were successful
Build Docker Image / Build-Docker-Image (push) Successful in 46s
Details
Build and Push Docker Image / Build-And-Push-Docker-Image (push) Successful in 51s
Details

Browse Source
This commit was merged in pull request #267.
This commit is contained in:
Tim Wundenberg
2024-11-19 22:04:43 +01:00
parent 641185919c
commit 35fea60750
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
middleware/content_security_policiy.go
View File

@@ -5,7 +5,7 @@ import "net/http"
func ContentSecurityPolicy(next http.Handler) http.Handler { func ContentSecurityPolicy(next http.Handler) http.Handler {
return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
w.Header().Set("Content-Security-Policy", "default-src 'self'; script-src 'self' https://umami.me-fit.eu/script.js") w.Header().Set("Content-Security-Policy", "default-src 'self' https://umami.me-fit.eu")
next.ServeHTTP(w, r) next.ServeHTTP(w, r)
}) })