Disable referrers

This commit is contained in:
Konrad Borowski 2019-03-04 09:56:04 +01:00
parent aa14b215a8
commit 39ad6c8d5d

View File

@ -8,7 +8,7 @@ use actix_diesel::Database;
use actix_web::error::InternalError; use actix_web::error::InternalError;
use actix_web::fs::{NamedFile, StaticFiles}; use actix_web::fs::{NamedFile, StaticFiles};
use actix_web::http::header::{ use actix_web::http::header::{
CONTENT_SECURITY_POLICY, LOCATION, X_FRAME_OPTIONS, X_XSS_PROTECTION, CONTENT_SECURITY_POLICY, LOCATION, REFERRER_POLICY, X_FRAME_OPTIONS, X_XSS_PROTECTION,
}; };
use actix_web::http::{Method, StatusCode}; use actix_web::http::{Method, StatusCode};
use actix_web::middleware::{DefaultHeaders, Logger}; use actix_web::middleware::{DefaultHeaders, Logger};
@ -209,7 +209,8 @@ fn main() -> io::Result<()> {
), ),
) )
.header(X_FRAME_OPTIONS, "DENY") .header(X_FRAME_OPTIONS, "DENY")
.header(X_XSS_PROTECTION, "1; mode=block"), .header(X_XSS_PROTECTION, "1; mode=block")
.header(REFERRER_POLICY, "no-referrer"),
) )
.resource("/", |r| { .resource("/", |r| {
r.method(Method::GET).with(index); r.method(Method::GET).with(index);