Add security headers

thechubbypanda · Jun 19, 2024 · 9f66349 · 9f66349
1 parent f3e9135
commit 9f66349
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/main.go b/main.go
@@ -56,6 +56,12 @@ func main() {
 			ExposedHeaders:   []string{},
 			AllowCredentials: true,
 		}),
+		middleware.SetHeader("Content-Security-Policy", "default-src 'self'; script-src 'self' unpkg.com; style-src 'self' 'unsafe-inline'"),
+		middleware.SetHeader("Strict-Transport-Security", "max-age=300"),
+		middleware.SetHeader("X-Frame-Options", "DENY"),
+		middleware.SetHeader("X-Content-Type-Options", "nosniff"),
+		middleware.SetHeader("Referrer-Policy", "strict-origin"),
+		middleware.SetHeader("Permissions-Policy", ""),
 	)
 
 	r.Route("/", func(r chi.Router) {