x/web-app-template
Archived
Template
2
0
Fork 0
Code Issues 13 Pull Requests 4 Actions Packages Activity

feat(security): enable Content-Security-Plolicy for external js #267

Merged
tim merged 1 commits from 263-content-security-policy into prod 2024-11-19 21:05:37 +00:00
Conversation 0 Commits 1 Files Changed 1 +1 -1
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
middleware/content_security_policiy.go
View File

@@ -5,7 +5,7 @@ import "net/http"
func ContentSecurityPolicy(next http.Handler) http.Handler {
return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
w.Header().Set("Content-Security-Policy", "default-src 'self'; script-src 'self' https://umami.me-fit.eu/script.js")
w.Header().Set("Content-Security-Policy", "default-src 'self' https://umami.me-fit.eu")
next.ServeHTTP(w, r)
})