Add Referrer-Policy and X-Content-Type-Options headers

2022-12-30 10:35:13 +01:00
parent df55c1e7cc
commit 02e7c7e824
1 changed files with 6 additions and 0 deletions
@@ -103,6 +103,12 @@ func cspHeader(w http.ResponseWriter, connect string) {
 	}
 	w.Header().Add("Content-Security-Policy",
 		c+" img-src data: 'self'; media-src blob: 'self'; default-src 'self'")
+
+	// Make browser stop sending referrer information
+	w.Header().Add("Referrer-Policy", "no-referrer")
+
+	// Require correct MIME type to load CSS and JS
+	w.Header().Add("X-Content-Type-Options", "nosniff")
 }

 func notFound(w http.ResponseWriter) {