From 18d160bec53c36b604900506a461598a7082ff9b Mon Sep 17 00:00:00 2001 From: nickago Date: Mon, 27 Jul 2015 08:29:08 -0700 Subject: Centralized header additions and removed duplicate code --- api/context.go | 2 ++ 1 file changed, 2 insertions(+) (limited to 'api/context.go') diff --git a/api/context.go b/api/context.go index ac9dffcbc..036128a00 100644 --- a/api/context.go +++ b/api/context.go @@ -100,6 +100,8 @@ func (h handler) ServeHTTP(w http.ResponseWriter, r *http.Request) { w.Header().Set(model.HEADER_REQUEST_ID, c.RequestId) w.Header().Set(model.HEADER_VERSION_ID, utils.Cfg.ServiceSettings.Version) + w.Header().Set("X-FRAME-OPTIONS", "DENY") + w.Header().Set("Content-Security-Policy", "frame-ancestors none") sessionId := "" -- cgit v1.2.3-1-g7c22