LumeWeb
/
tusd
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add nosniff header by default

This commit is contained in:
Naren Venkataraman 2015-11-15 17:21:57 -05:00
parent 294b815afb
commit d87b72e34d
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
handler.go
View File

@ -158,6 +158,9 @@ func (handler *Handler) ServeHTTP(w http.ResponseWriter, r *http.Request) {
// Set current version used by the server // Set current version used by the server
header.Set("Tus-Resumable", "1.0.0") header.Set("Tus-Resumable", "1.0.0")
// Add nosniff to all responses https://golang.org/src/net/http/server.go#L1429
header.Set("X-Content-Type-Options", "nosniff")
// Set appropriated headers in case of OPTIONS method allowing protocol // Set appropriated headers in case of OPTIONS method allowing protocol
// discovery and end with an 204 No Content // discovery and end with an 204 No Content
if r.Method == "OPTIONS" { if r.Method == "OPTIONS" {
@ -458,9 +461,7 @@ func (handler *Handler) sendError(w http.ResponseWriter, r *http.Request, err er
reason = "" reason = ""
} }
//https://golang.org/src/net/http/server.go#L1429
w.Header().Set("Content-Type", "text/plain; charset=utf-8") w.Header().Set("Content-Type", "text/plain; charset=utf-8")
w.Header().Set("X-Content-Type-Options", "nosniff")
w.Header().Set("Content-Length", strconv.Itoa(len(reason))) w.Header().Set("Content-Length", strconv.Itoa(len(reason)))
w.WriteHeader(status) w.WriteHeader(status)
w.Write([]byte(reason)) w.Write([]byte(reason))