add x-xss-protection header

2022-07-03 11:16:55 +02:00 · 2022-07-03 11:16:55 +02:00 · ad0d9b1215
commit ad0d9b1215
parent f29ab9c96f
1 changed files with 5 additions and 0 deletions
--- a/server.js
+++ b/server.js
@ -326,6 +326,11 @@ if(!config.disallow_proxies_by_headers) {
  blocked_headers = []
 }

+app.use(function(req,res,next) {
+  res.set("X-XSS-Protection","1; mode=block")
+  next()
+})
+
 if(DID_I_FINALLY_ADD_HTTPS) {

  //auto redirect to https