Class: Actn::Api::Mw::NoXSS

Inherits:
Object
  • Object
show all
Includes:
Goliath::Rack::AsyncMiddleware
Defined in:
lib/actn/api/mw/no_xss.rb

Constant Summary collapse

HEADERS = 
{
  'X-Frame-Options' => 'SAMEORIGIN',
  'X-XSS-Protection' => '1; mode=block',
  'X-Content-Type-Options' => 'nosniff'
}

Instance Method Summary collapse

Instance Method Details

#post_process(env, status, headers, body) ⇒ Object 



20
21
22
23
 
# File 'lib/actn/api/mw/no_xss.rb', line 20

def post_process(env, status, headers, body)
  headers.update HEADERS
  [status, headers, body]
end