aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorclsr <clsr@clsr.net>2016-07-01 01:08:12 +0200
committerclsr <clsr@clsr.net>2016-07-01 01:08:12 +0200
commit551fe100edccdf3809e2e475542292f552dc6e72 (patch)
tree113b90de5948bceb2ae27789759d54e2bcb672cc
parent0e78c2307da4177fa49031e717c3688d21428695 (diff)
downloadgomf-551fe100edccdf3809e2e475542292f552dc6e72.tar.gz
gomf-551fe100edccdf3809e2e475542292f552dc6e72.zip
Add X-Content-Type-Options: nosniff header
-rw-r--r--api.go1
1 files changed, 1 insertions, 0 deletions
diff --git a/api.go b/api.go
index e580bed..2e5229b 100644
--- a/api.go
+++ b/api.go
@@ -36,6 +36,7 @@ func handleFile(w http.ResponseWriter, r *http.Request) {
if csp != "" {
w.Header().Set("Content-Security-Policy", csp)
}
+ w.Header().Set("X-Content-Type-Options", "nosniff")
w.Header().Set("Last-Modified", modtime.UTC().Format(http.TimeFormat))
w.Header().Set("Expires", modtime.UTC().Add(time.Hour*24*30).Format(http.TimeFormat))
w.Header().Set("Cache-Control", "max-age=2592000")