f60765ac93
This change adds some security headers like Content-Security-Policy. It does not set the HSTS header because Content-Security-Policy prevents mixed HTTP and HTTPS content and the server does not use cookies. However it is a header which could be added later on. It also moves some header added by #5805 from a vendored file to a generic handler. Fixes ##5813 |
||
|---|---|---|
| .. | ||
| context | ||
| handlers | ||
| mux | ||
| rpc | ||