adding optional nosniff header

cassproject · Sep 20, 2023 · b8ae1d4 · b8ae1d4
1 parent ed330a6
commit b8ae1d4
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/src/main/server.js b/src/main/server.js
@@ -140,6 +140,13 @@ if (process.env.INCLUDE_STRICT_TRANSPORT_SECURITY_HEADER == "true") {
     });
 }
 
+if (process.env.INCLUDE_MIME_NOSNIFF_HEADER == "true") {
+    app.use((req, res, next) => {
+        res.setHeader("X-Content-Type-Options", "nosniff");
+        next();
+    });
+}
+
 let v8 = require('v8');
 let glob = require('glob');
 let path = require('path');