feat(site): add security headers

kestra-io · Aug 26, 2024 · 3e3786e · 3e3786e
1 parent c371ff8
commit 3e3786e
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/server/middleware/cache-control.js → server/middleware/headers.js b/server/middleware/cache-control.js → server/middleware/headers.js
@@ -1,8 +1,9 @@
-import { useCDNHeaders } from '#nuxt-multi-cache/composables'
-
 export default defineEventHandler((event) => {
     const url = event.node.req.url;
 
+    event.node.res.setHeader("X-Frame-Options", "DENY");
+    event.node.res.setHeader("X-Content-Type-Options", "nosniff");
+
     if (url.startsWith("/api/_content/")) {
         event.node.res.setHeader("Cache-Control", "public, max-age=604800, immutable");
     }