Merge pull request #2156 from overleaf/hb-secure-headers

Use helmet to set nosniff and sameorigin GitOrigin-RevId: e5d684d772523ca740be75ebe9d248db74209f25
2026-11-14 06:03:45 +01:00 · 2019-09-18 10:41:51 +00:00
parent 696527df8d
commit 2031115f48
1 changed files with 1 additions and 3 deletions
@@ -204,9 +204,7 @@ webRouter.use(function(req, res, next) {
    dnsPrefetchControl: false,
    referrerPolicy: { policy: 'origin-when-cross-origin' },
    noCache: isLoggedIn || isProjectPage,
-    noSniff: false,
-    hsts: false,
-    frameguard: false
+    hsts: false
  })(req, res, next)
 })