Added HSTS header

This commit is contained in:
Eduard Urbach 2025-02-20 20:08:38 +01:00
parent f1af7e243e
commit 6933e3b5e6
Signed by: akyoto
GPG Key ID: C874F672B1AF20C0
2 changed files with 11 additions and 0 deletions

View File

@ -18,6 +18,7 @@ func main() {
server := web.NewServer()
server.Use(middleware.Recover)
server.Use(middleware.RedirectTrailingSlashes)
server.Use(middleware.HSTS)
server.Get("/", pages.Frontpage)
server.Get("/blog", pages.Blog)
server.Get("/:post", pages.Post)

10
server/middleware/HSTS.go Normal file
View File

@ -0,0 +1,10 @@
package middleware
import (
"git.akyoto.dev/go/web"
)
func HSTS(ctx web.Context) error {
ctx.Response().SetHeader("Strict-Transport-Security", "max-age=63072000; includeSubDomains; preload")
return ctx.Next()
}