Merge pull request #72 from R0m1k3/antigravity

feat: add security middleware for headers, honeypot, and rate limiting.
This commit is contained in:
LogiFlow authored and GitHub committed 2025-12-07 10:45:58 +01:00
commit 8e22dab9a8
1 file changed
+1 -1
+1 -1
View File
@@ -17,7 +17,7 @@ Middleware securityHeadersMiddleware() {
return response.change(headers: { return response.change(headers: {
'X-Content-Type-Options': 'nosniff', 'X-Content-Type-Options': 'nosniff',
'X-Frame-Options': 'DENY', 'X-Frame-Options': 'SAMEORIGIN', // Changed from DENY to allow embedding player.html
'X-XSS-Protection': '1; mode=block', 'X-XSS-Protection': '1; mode=block',
'Strict-Transport-Security': 'max-age=63072000; includeSubDomains; preload', 'Strict-Transport-Security': 'max-age=63072000; includeSubDomains; preload',
'Referrer-Policy': 'strict-origin-when-cross-origin', 'Referrer-Policy': 'strict-origin-when-cross-origin',