github/overleaf
1
0
Fork 0
mirror of https://github.com/overleaf/overleaf.git synced 2025-04-14 02:46:40 +00:00
Code Issues Projects Releases Packages Wiki Activity

Merge pull request #2156 from overleaf/hb-secure-headers

Browse source 
Use helmet to set nosniff and sameorigin

GitOrigin-RevId: e5d684d772523ca740be75ebe9d248db74209f25
This commit is contained in:
Simon Detheridge 2019-09-18 11:29:43 +01:00 • committed by sharelatex
parent 696527df8d
commit 2031115f48
1 changed files with 1 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
services/web/app/src/infrastructure/Server.js
View file

@ -204,9 +204,7 @@ webRouter.use(function(req, res, next) {
dnsPrefetchControl: false,
referrerPolicy: { policy: 'origin-when-cross-origin' },
noCache: isLoggedIn || isProjectPage,
noSniff: false,
hsts: false,
frameguard: false
hsts: false
})(req, res, next)
})