diff options
Diffstat (limited to 'httpd.c')
| -rw-r--r-- | httpd.c | 1 |
1 files changed, 1 insertions, 0 deletions
| @@ -556,6 +556,7 @@ void httpd_connection(FILE *f) | |||
| 556 | 556 | ||
| 557 | headers = xs_dict_append(headers, "access-control-allow-origin", "*"); | 557 | headers = xs_dict_append(headers, "access-control-allow-origin", "*"); |
| 558 | headers = xs_dict_append(headers, "access-control-allow-headers", "*"); | 558 | headers = xs_dict_append(headers, "access-control-allow-headers", "*"); |
| 559 | headers = xs_dict_append(headers, "access-control-expose-headers", "Link"); | ||
| 559 | 560 | ||
| 560 | /* disable any form of fucking JavaScript */ | 561 | /* disable any form of fucking JavaScript */ |
| 561 | headers = xs_dict_append(headers, "Content-Security-Policy", "script-src ;"); | 562 | headers = xs_dict_append(headers, "Content-Security-Policy", "script-src ;"); |