mirror of
https://github.com/0rangebananaspy/authelia.git
synced 2024-09-14 22:47:21 +07:00
556a115c83
This fixes an issue with missing modern security headers such as the X-Content-Type-Options, Referer-Policy, etc.
17 lines
545 B
Go
17 lines
545 B
Go
package middlewares
|
|
|
|
import (
|
|
"github.com/valyala/fasthttp"
|
|
)
|
|
|
|
// SecurityHeaders middleware adds several modern recommended security headers with safe values.
|
|
func SecurityHeaders(next fasthttp.RequestHandler) fasthttp.RequestHandler {
|
|
return func(ctx *fasthttp.RequestCtx) {
|
|
ctx.Response.Header.SetBytesKV(headerXContentTypeOptions, headerValueNoSniff)
|
|
ctx.Response.Header.SetBytesKV(headerReferrerPolicy, headerValueStrictOriginCrossOrigin)
|
|
ctx.Response.Header.SetBytesKV(headerPermissionsPolicy, headerValueCohort)
|
|
|
|
next(ctx)
|
|
}
|
|
}
|