Merge pull request 'Fix spelling of referrer in referrer-policy header' (#18) from cadence/Wikiless:fix-referrer-spelling into main

Reviewed-on: https://codeberg.org/orenom/Wikiless/pulls/18
This commit is contained in:
orenom
2021-10-04 20:21:06 +02:00
+2 -2
View File
@@ -54,11 +54,11 @@ if(config.https_enabled) {
const http = require('http').Server(app)
app.use((req, res, next) => {
app.use((req, res, next) => {
// set CSP rules and other headers to every request
res.set({
'Content-Security-Policy': "default-src 'none'; base-uri 'none'; font-src 'self' data:; img-src 'self' data:; object-src 'none'; script-src 'none'; script-src-attr 'none'; style-src 'self' 'unsafe-inline'; media-src 'self'; form-action 'self'; frame-ancestors 'none'; " + (config.https_enabled ? 'upgrade-insecure-requests;' : '') + " block-all-mixed-content;",
'Referrer-Policy': 'no-refferer',
'Referrer-Policy': 'no-referrer',
...(config.https_enabled ? { 'Strict-Transport-Security': 'max-age=31536000' } : {}),
'X-Content-Type-Options': 'nosniff',
'X-DNS-Prefetch-Control': 'off',