Add more useful headers

stackernews · Feb 10, 2024 · 94ea9de · 94ea9de
1 parent a78c934
commit 94ea9de
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/middleware.js b/middleware.js
@@ -48,6 +48,9 @@ export function middleware (request) {
   resp.headers.set('Content-Security-Policy', cspHeader)
   // for browsers that don't support CSP
   resp.headers.set('X-Frame-Options', 'DENY')
+  // more useful headers
+  resp.headers.set('X-Content-Type-Options', 'nosniff')
+  resp.headers.set('Referrer-Policy', 'origin-when-cross-origin')
 
   return resp
 }