mirror of
https://gitea.invidious.io/iv-org/invidious-copy-2022-08-14.git
synced 2024-08-15 00:53:20 +00:00
Add X-XSS-Protection and X-Content-Type-Options
This commit is contained in:
parent
e590d39aa9
commit
e6d2166bac
1 changed files with 3 additions and 0 deletions
|
@ -106,6 +106,9 @@ spawn do
|
|||
end
|
||||
|
||||
before_all do |env|
|
||||
env.response.headers["X-XSS-Protection"] = "1; mode=block;"
|
||||
env.response.headers["X-Content-Type-Options"] = "nosniff"
|
||||
|
||||
if env.request.cookies.has_key? "SID"
|
||||
headers = HTTP::Headers.new
|
||||
headers["Cookie"] = env.request.headers["Cookie"]
|
||||
|
|
Loading…
Reference in a new issue