Add additional security headers

regalijan · Oct 19, 2023 · b5135ce · b5135ce
1 parent 6f250ca
commit b5135ce
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/functions/_middleware.ts b/functions/_middleware.ts
@@ -102,10 +102,13 @@ async function setHeaders(context: RequestContext) {
     "Wintervale",
   ];
 
+  response.headers.set("Permissions-Policy", "clipboard-write=(self), interest-cohort=()");
+  response.headers.set("Referrer-Policy", "same-origin");
   response.headers.set(
     "RTV",
     rtvValues[Math.round(Math.random() * (rtvValues.length - 1))]
   );
+  response.headers.set("X-Frame-Options", "SAMEORIGIN");
   response.headers.set("X-XSS-Protection", "1; mode=block");
 
   return response;