98256f1f54
Some checks failed
CI / Build & Test (push) Has been cancelled
- 移除全局 CSP 头（API 返回 JSON，CSP 意义不大） - 新增 Swagger 专用处理器，设置宽松的 CSP 允许 inline style 和 data URI - 拦截 swagger-ui.css 注入品牌 CSS，隐藏 SmartBear logo - 替换为 "MengStack API 文档 v0.3.0" 品牌标识
15 lines
404 B
Go
15 lines
404 B
Go
package middleware
|
|
|
|
import "github.com/gin-gonic/gin"
|
|
|
|
// SecurityHeaders adds common security headers to responses.
|
|
func SecurityHeaders() gin.HandlerFunc {
|
|
return func(c *gin.Context) {
|
|
c.Header("X-Content-Type-Options", "nosniff")
|
|
c.Header("X-Frame-Options", "DENY")
|
|
c.Header("X-XSS-Protection", "1; mode=block")
|
|
c.Header("Referrer-Policy", "strict-origin-when-cross-origin")
|
|
c.Next()
|
|
}
|
|
}
|