diff options
Diffstat (limited to 'internal/middlewares/const.go')
| -rw-r--r-- | internal/middlewares/const.go | 16 |
1 files changed, 11 insertions, 5 deletions
diff --git a/internal/middlewares/const.go b/internal/middlewares/const.go index ed66a8c73..ee9a56c08 100644 --- a/internal/middlewares/const.go +++ b/internal/middlewares/const.go @@ -40,15 +40,19 @@ var ( headerXFrameOptions = []byte(fasthttp.HeaderXFrameOptions) headerPragma = []byte(fasthttp.HeaderPragma) headerCacheControl = []byte(fasthttp.HeaderCacheControl) - headerXXSSProtection = []byte(fasthttp.HeaderXXSSProtection) headerContentSecurityPolicy = []byte(fasthttp.HeaderContentSecurityPolicy) - headerPermissionsPolicy = []byte("Permissions-Policy") + headerPermissionsPolicy = []byte("Permissions-Policy") + headerCrossOriginOpenerPolicy = []byte("Cross-Origin-Opener-Policy") + headerCrossOriginEmbedderPolicy = []byte("Cross-Origin-Embedder-Policy") + headerCrossOriginResourcePolicy = []byte("Cross-Origin-Resource-Policy") + headerXDNSPrefetchControl = []byte("X-DNS-Prefetch-Control") ) var ( headerValueFalse = []byte("false") headerValueTrue = []byte("true") + headerValueOff = []byte("off") headerValueMaxAge = []byte("100") headerValueVary = []byte("Accept-Encoding, Origin") headerValueVaryWildcard = []byte("Accept-Encoding") @@ -59,11 +63,13 @@ var ( headerValueNoSniff = []byte("nosniff") headerValueStrictOriginCrossOrigin = []byte("strict-origin-when-cross-origin") - headerValueSameOrigin = []byte("SAMEORIGIN") + headerValueDENY = []byte("DENY") + headerValueSameOrigin = []byte("same-origin") + headerValueSameSite = []byte("same-site") + headerValueRequireCORP = []byte("require-corp") headerValueNoCache = []byte("no-cache") headerValueNoStore = []byte("no-store") - headerValueXSSModeBlock = []byte("1; mode=block") - headerValueCohort = []byte("interest-cohort=()") + headerValuePermissionsPolicy = []byte("accelerometer=(), autoplay=(), camera=(), display-capture=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), screen-wake-lock=(), sync-xhr=(), xr-spatial-tracking=(), interest-cohort=()") ) const ( |