From 4abc08b403e97f1b01d5e32e5ca8a8a0185a5e0c Mon Sep 17 00:00:00 2001 From: perennial Date: Wed, 4 Dec 2024 14:18:02 +1100 Subject: [PATCH] add X-Powered-By response header --- server/middleware/csp.go | 1 + 1 file changed, 1 insertion(+) diff --git a/server/middleware/csp.go b/server/middleware/csp.go index e9f0795..dfeeebe 100644 --- a/server/middleware/csp.go +++ b/server/middleware/csp.go @@ -22,6 +22,7 @@ func SetPrivacyHeaders(h http.Handler) http.Handler { header.Add("X-Frame-Options", "DENY") // use this if need iframe: `X-Frame-Options: SAMEORIGIN` header.Add("X-Content-Type-Options", "nosniff") + header.Add("X-Powered-By", "hatsune miku") /* NOTE: The HSTS header is commented out to avoid potential conflicts with reverse proxies, which may already set their own HSTS policies. Generally, it is better for reverse proxies