hubert/SimpleNotes
1
0
Fork 0
Code Projects Releases Activity

Add Referrer-Policy

Browse Source
This commit is contained in:
Hubert Van De Walle 2020-08-13 23:58:54 +02:00
parent e65a4e10d6
commit 29e445ff41
1 changed files with 9 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
app/src/main/kotlin/filters/SecurityFilter.kt
View File

@ -5,16 +5,16 @@ import org.http4k.core.HttpHandler
import org.http4k.core.Request
object SecurityFilter {
operator fun invoke(): Filter {
return Filter { next: HttpHandler ->
{ request: Request ->
val response = next(request)
.header("X-Content-Type-Options", "nosniff")
operator fun invoke() = Filter { next: HttpHandler ->
{ request: Request ->
val response = next(request)
.header("X-Content-Type-Options", "nosniff")
if (response.header("Content-Type")?.contains("text/html") == true)
response.header("Content-Security-Policy", "default-src 'self'")
else response
}
if (response.header("Content-Type")?.contains("text/html") == true) {
response
.header("Content-Security-Policy", "default-src 'self'")
.header("Referrer-Policy", "no-referrer")
} else response
}
}
}