add API response security headers

2026-09-06 17:53:33 +03:00
parent f54f79e8ef
commit d6040379c2
1 changed files with 2 additions and 0 deletions
@@ -608,6 +608,8 @@ function json(res, code, body) {
    'Content-Type': 'application/json; charset=utf-8',
    'Access-Control-Allow-Origin': '*',
    'Cache-Control': 'no-store',
+    'X-Content-Type-Options': 'nosniff',
+    'Referrer-Policy': 'no-referrer',
  });
  res.end(JSON.stringify(body));
 }