fix after change nickname
This commit is contained in:
@@ -453,10 +453,6 @@ async fn serve_token_file(
|
||||
HeaderName::from_static("x-robots-tag"),
|
||||
HeaderValue::from_static("noindex, nofollow, noarchive, nosnippet"),
|
||||
);
|
||||
response.headers_mut().insert(
|
||||
header::REFERRER_POLICY,
|
||||
HeaderValue::from_static("no-referrer"),
|
||||
);
|
||||
response.headers_mut().insert(
|
||||
header::CACHE_CONTROL,
|
||||
HeaderValue::from_str(&format!(
|
||||
|
||||
+11
-2
@@ -200,10 +200,19 @@ pub fn router(
|
||||
}
|
||||
|
||||
async fn add_non_asset_security_headers(request: Request, next: Next) -> Response {
|
||||
let is_asset = request.uri().path().starts_with("/assets/");
|
||||
let path = request.uri().path();
|
||||
let is_asset = path.starts_with("/assets/");
|
||||
let is_file = path.starts_with("/f/");
|
||||
let mut response = next.run(request).await;
|
||||
|
||||
if !is_asset {
|
||||
if is_file {
|
||||
let headers = response.headers_mut();
|
||||
headers.remove("x-frame-options");
|
||||
headers.remove("cross-origin-opener-policy");
|
||||
headers.remove("cross-origin-resource-policy");
|
||||
headers.remove("referrer-policy");
|
||||
headers.remove("permissions-policy");
|
||||
} else if !is_asset {
|
||||
let headers = response.headers_mut();
|
||||
headers
|
||||
.entry("x-content-type-options")
|
||||
|
||||
Reference in New Issue
Block a user