mirror of
https://github.com/placeholder-soft/web.git
synced 2026-04-28 19:05:28 +08:00
Update Cross-Origin-Opener-Policy header (#511)
This commit is contained in:
@@ -431,7 +431,7 @@ app.use(
|
||||
setHeaders: function (res) {
|
||||
res.setHeader('cache-control', 'no-store');
|
||||
res.setHeader('content-security-policy', cspObjectToString);
|
||||
res.setHeader('cross-origin-opener-policy', 'same-origin');
|
||||
res.setHeader('cross-origin-opener-policy', 'same-origin-allow-popups');
|
||||
res.setHeader('referrer-policy', 'strict-origin-when-cross-origin');
|
||||
res.setHeader('strict-transport-security', 'max-age=63072000; includeSubDomains; preload');
|
||||
res.setHeader('x-content-type-options', 'nosniff');
|
||||
|
||||
@@ -103,7 +103,7 @@ const securityHeaders = [
|
||||
},
|
||||
{
|
||||
key: 'cross-origin-opener-policy',
|
||||
value: 'same-origin',
|
||||
value: 'same-origin-allow-popups',
|
||||
},
|
||||
{
|
||||
key: 'referrer-policy',
|
||||
|
||||
@@ -110,7 +110,7 @@ const securityHeaders = [
|
||||
},
|
||||
{
|
||||
key: 'cross-origin-opener-policy',
|
||||
value: 'same-origin',
|
||||
value: 'same-origin-allow-popups',
|
||||
},
|
||||
{
|
||||
key: 'referrer-policy',
|
||||
|
||||
Reference in New Issue
Block a user