feat(security): #263 securtiy options for htmx

2024-11-19 22:25:21 +01:00
parent 35fea60750
commit 925041ef29
1 changed files with 43 additions and 35 deletions
--- a/template/layout.templ
+++ b/template/layout.templ
@@ -3,6 +3,7 @@ package template
 templ Layout(slot templ.Component, user templ.Component, environment string) {
 <!DOCTYPE html>
 <html lang="en">
+
 <head>
 	<meta charset="utf-8" />
 	<title>ME-FIT</title>
@@ -12,9 +13,15 @@ templ Layout(slot templ.Component, user templ.Component, environment string) {
 	if environment == "prod" {
 	<script defer src="https://umami.me-fit.eu/script.js" data-website-id="3c8efb09-44e4-4372-8a1e-c3bc675cd89a"></script>
 	}
+	<meta name="htmx-config" content='{
+		"includeIndicatorStyles": false,
+		"selfRequestsOnly": true,
+		"allowScriptTags": false
+	}' />
 	<script src="/static/js/htmx.min.js"></script>
 	<script src="/static/js/toast.js"></script>
 </head>
+
 <body>
 	<div class="h-screen flex flex-col">
 		<div class="flex justify-end items-center gap-2 py-1 px-2 h-12 md:gap-10 md:px-10 md:py-2 shadow">
@@ -36,5 +43,6 @@ templ Layout(slot templ.Component, user templ.Component, environment string) {
 		</div>
 	</div>
 </body>
+
 </html>
 }